Superior Quality Cisco 500-280 Exam Brain Dumps in Lead2pass

All the Lead2pass Cisco 500-280 questions & answers in this product are designed by Cisco certified experts and were given utmost attention to guarantee that it is 100% factual and not fabricated. Pass Cisco 500-280 exam in first attempt !

QUESTION 1
What does packet sniffing do?

A.    isolates datagrams into like groups
B.    reads datagrams directly off the wire
C.    transmits datagrams over a wireless network
D.    rebuilds datagram streams

Answer: B

QUESTION 2
When building a platform for a Snort installation, which set of components is a major security concern?

A.    IP address, mask, and gateway settings
B.    host naming conventions
C.    URL feed vendors
D.    default accounts and settings

Answer: D

QUESTION 3
In the IP addressing scheme of your organization, each subnet consists of 4096 hosts, and the beginning of the addressing scheme is 172.16.0.0. Your remote office is allocated the range of addresses from the first subnet. What are the CIDR notation, network address, broadcast address, and valid IP address in your assigned range?

A.    172.16.0.0/24, 172.16.0.0, 172.16.8.255, 172.16.0.51
B.    172.16.0.0/20, 172.16.0.0, 172.16.15.255, 172.16.8.252
C.    172.16.0.0/16, 172.16.0.0, 172.16.32.255, 172.16.22.4
D.    172.16.0.0/12, 172.16.0.0, 172.16.64.255, 172.16.52.112

Answer: B

QUESTION 4
Which statement about implementing DAQ is true?

A.    It is a shell script that works on any Linux platform.
B.    It must be compiled separately.
C.    You must obtain it from Sourceforge.
D.    It is not open source.

Answer: B

QUESTION 5
Which version of libpcap does DAQ require?

A.    0.9.8 or later
B.    1.0.0 or later
C.    any version
D.    none

Answer: B

QUESTION 6
If Snort is installed and the sensor, database, and web server all reside on the same machine, to which ports should remote access of the sensor be restricted?

A.    22 and 443
B.    80 and 443
C.    443 and 3306
D.    23 and 80

Answer: A

QUESTION 7
To execute a command in Linux while in the directory where it is located, and be sure you are only running that particular copy, what would you use in front of the executable name?

A.    ./
B.    ../
C.    ..\
D.    .\

Answer: A

QUESTION 8
Which application can read Barnyard log_pcap output plug-in files?

A.    SnortReport
B.    BASE or ACID
C.    tcpdump
D.    Snorby

Answer: C

QUESTION 9
To accept input from Snort and produce various forms of output, the Barnyard architecture consists of which components?

A.    preprocessors and reassemblers
B.    preprocessors and detection engine
C.    data processors and output plug-ins
D.    data processors and reassemblers

Answer: C

Lead2pass provides superior study guides so you can maximize your time while studying for the Cisco 500-280 exam instead of going through hours of studying via books and lecturers to then guess what questions may arise. We ensure that you are actually studying real questions and answers that were on either previous exams or ones that could possibly be on upcoming exams due to new releases or upgrades. With our unique Cisco 500-280 Certification study guides you can rest assured that you will increase your chances of passing the certification exam on your very first try.

http://www.lead2pass.com/500-280.html