Answer: C QUESTION: 43 Referring to the diagram shown on the MARS GUI screen, why is the Push function not enabled (grayed out)? 16
A. Because the HQ-FW-1 device is the alternate choke point for mitigating this attack. B. Because MARS cannot push commands to Layer 3 devices. C. Because the Incident has not been confirmed by the administrator. D. Because the Incident is a false positive. E. Because MARS is operating at level 2 and not at level 3. F. Because the selected mitigation command is not supported on the HQ-FW-1 device. Answer: B QUESTION: 44 Which three of the following reporting devices can be added to the MARS appliance using the "Add SW security apps on new host?" (Choose three.) 17
A. Cisco ACS B. Netflow C. SNORT D. FWSM E. Generic web server. Answer: A, C, E QUESTION: 45 After manually adding the BR-FW-1 device shown in the MARS GUI screen, what additional steps do you need to perform? 18
A. Click "Activate" to enable the device. B. Click "Submit" to enable the device. C. Click "Submit" to test access to the device. When access is successful, click "Activate" to activate the device.
You've reached the end of your free preview.
Want to read all 9 pages?
- Fall '20
- English-language films, Attack!, attack, Netflow, a. Click