Topic 1
The FireAMP Mobile endpoint connector currently supports which mobile OS device?
C
Topic 1
Which statement describes an advantage of the FireAMP product?
C
Topic 1
Which feature allows retrospective detection?
B
Topic 1
Which statement describes an advantage of cloud-based detection?
B
Topic 1
The FireAMP connector monitors the system for which type of activity?
C
Topic 1
Which disposition can be returned in response to a malware cloud lookup?
C
Topic 1
Which option is a detection technology that is used by FireAMP?
A
Topic 1
If a file's SHA-256 hash is sent to the cloud, but the cloud has never seen the hash before, which disposition is returned?
B
Topic 1
File information is sent to the Sourcefire Collective Security Intelligence Cloud using which format?
A. MD5
B. SHA-1
C. filenames
D. SHA-256
D
Topic 2, Outbreak Control Menu Items
Topic 2
How does application blocking enhance security?
D
Topic 2
Which set of actions would you take to create a simple custom detection?
A
Topic 2
Advanced custom signatures are written using which type of syntax?
C
Topic 2
When discussing the FireAMP product, which term does the acronym DFC represent?
C
Topic 2
Custom whitelists are used for which purpose?
A. to specify which files to alert on
B. to specify which files to delete
C. to specify which files to ignore
D. to specify which files to sandbox
C
Topic 3, Enpoint Policies
Topic 3
The FireAMP connector supports which proxy type?
B