Quiz 642-544

Quiz 642-544, MARS – Implementing Cisco Security Monitoring, Analysis and Response System

Which three statements are correct about the Cisco Security MARS global and local controller architecture?

What are the two options for handling false-positive events reported by the Cisco Security MARS appliance?

What are three benefits in deploying Cisco Security MARS appliances using the global and local controller architecture?

What is a supported mitigation feature on the Cisco Security MARS appliance?

Which one of the following incident types is pushed from a local controller to a global controller?

what is the best practice to follow?

Which one of the following statements is correct regarding the Cisco Security MARS maintenance procedure?

How does the Cisco Security MARS appliance perform IP address correlation (that is, map IP address translation) across NAT and PAT boundaries?

Which statement best describes the case management feature of Cisco Security MARS?

What is used to publish events to Cisco Security MARS about Cisco IPS signatures that have fired?