Study tips 500-285

Which option describes the two basic components of Sourcefire Snort rules?

Which mechanism should be used to write an IPS rule that focuses on the client or server side of a TCP communication?

which deployment types?

Which interface type allows for bypass mode?

Which Sourcefire feature allows you to send traffic directly through the device without inspecting it?

Which interface type allows for VLAN tagging?

Which statement is true concerning static NAT?

which resources of secondary devices?

Which statement is true when network traffic meets the criteria specified in a correlation rule?

Which option is a valid whitelist evaluation value?