Study tips 642-545

Which two items are correct according to the rule shown on the MARS GUI screen?

Which action enables the Cisco Security MARS appliance to ignore false-positive events by either dropping the events completely or by just logging them to the database?

Which additional Cisco Security MARS configuration will be required to correct this issue?

Which description is correct with regard to Cisco Security MARS and Cisco IPS signature support?

Which of the following options are the functions of SIMs?

Which two statements accurately describe the Cisco Security MARS rules?

Which two statements are true according to the Incident shown on the MARS GUI screen?

What will occur when you try to run a Cisco Security MARS query that will take a long time to complete?

which function?

Which description is correct with regard to the case management feature of Cisco Security MARS?