Free Cisco 500-280 Exam Dumps Questions & Answers

Which statement about the FTPTelnet preprocessor is true?

• A.  It can normalize FTP network traffic.
• B.  It can limit how much server-side traffic to process.
• C.  It can reassemble FTP fragments.
• D.  It can check for correctness of Telnet commands.

For which application is Snort output suitable?

• A.  tcpdump
• B.  Wireshark
• C.  NMap
• D.  any application that can read PCAP format

Which file is the primary configuration file for keeping rules up to date?

• A.  porker.conf
• B.  pulledpork.conf
• C.  pulled.config
• D.  snort.conf

Which preprocessor maintains connection state so that attacks that manifest over multiple packets in a session can be detected?

• A.  frag3
• B.  flow tracking module
• C.  detection engine
• D.  stream5

Which keyword can you use to try to close a session when an alert is triggered?

• A.  logto
• B.  tag
• C.  react
• D.  resp