CertsPoint
Sign In Get Started
See all results for ""
Exams About Us
Sign In Get Started
Exam Overview
Exam Code 500-285
Exam Name Cisco Securing Cisco Networks with Fire-SIGHT Intrusion Prevention System
Vendor Cisco
Total Questions 59
Last Updated 26-Oct, 2026
Free 500-285 Questions Get Premium Access
Why CertsPoint?
  • Latest & Verified Questions
  • Detailed Explanations
  • Regular Updates
  • Full-Length Practice Tests
  • Boost Your Exam Confidence

PDF Study Materials

Downloadable guides and resources

Practice Tests

Full-length tests with real exam experience

Progress Tracking

Monitor your performance and improvement

Study Anywhere

Access on desktop, tablet, and mobile

Excellent
4.6 (398 Up Votes)
Secure Payment Privacy Protected Money Back Guarantee

Free 500-285 Practice Questions

Explore 5 free practice questions for the Cisco 500-285 exam and review the answers and explanations to support your preparation.

  1. Question 1

    Single answer

    When adding source and destination ports in the Ports tab of the access control policy rule editor, which restriction is in place?

    • Option A:
      The protocol is restricted to TCP only.
      Correct
    • Option B:
      The protocol is restricted to UDP only.
      Correct
    • Option C:
      The protocol is restricted to TCP or UDP.
      Correct
    • Option D:
      The protocol is restricted to TCP and UDP
      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: C

  2. Question 2

    Single answer

    How do you configure URL filtering?

    • Option A:
      Add blocked URLs to the global blacklist.
      Correct
    • Option B:
      Create a Security Intelligence object that contains the blocked URLs and add the object to the access control policy.
      Correct
    • Option C:
       Create an access control rule and, on the URLs tab, select the URLs or URL categories that are to be blocked or allowed.
      Correct
    • Option D:
       Create a variable.
      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: C

  3. Question 3

    Single answer

    Which statement is true in regard to the Sourcefire Security Intelligence lists

    • Option A:
      The global blacklist universally allows all traffic through the managed device.
      Correct
    • Option B:
      The global whitelist cannot be edited.
      Correct
    • Option C:
      IP addresses can be added to the global blacklist by clicking on interactive graphs in Context Explorer.
      Correct
    • Option D:
      The Security Intelligence lists cannot be updated.  
      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: C

  4. Question 4

    Single answer

    Which option is one of the three methods of updating the IP addresses in Sourcefire Security Intelligence?

    • Option A:
      subscribe to a URL intelligence feed
      Correct
    • Option B:
      subscribe to a VRT
      Correct
    • Option C:
      upload a list that you create
      Correct
    • Option D:
       automatically upload lists from a network share
      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: C

  5. Question 5

    Single answer

    Which option is true regarding the $HOME_NET variable?

    • Option A:
      is a policy-level variable
      Correct
    • Option B:
       has a default value of "all"
      Correct
    • Option C:
      defines the network the active policy protects
      Correct
    • Option D:
      is used by all rules to define the internal network
      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: C