1.
What will occur when you try to run a Cisco Security MARS query that will take a long time to complete?
2.
According to the following diagram displayed on the MARS GUI screen, can you tell me the reason that the Push function is not enabled (grayed out)?
3.
The Cisco Security MARS appliance supports which protocol for data archiving and restoring?
4.
Why might Cisco Security MARS not be forwarding the incoming syslog messages that it should be forwarding?
5.
What is used to publish events to Cisco Security MARS about Cisco IPS signatures that have fired?
6.
Which description is correct with regard to the case management feature of Cisco Security MARS?
7.
Cisco Security MARS offers a family of high-performance, scalable appliances for threat management, monitoring, and mitigation, enabling customers to make more effective use of network and security devices. What is a supported mitigation feature on the Cisco Security MARS appliance?
8.
Cisco Security MARS combines network intelligence, context correlation, vector analysis, anomaly detection, hotspot identification, and automated mitigation capabilities. Which action will you take to enable the Cisco Security MARS appliance to ignore false-positive events by either dropping the events completely, or by just logging them to the database?
9.
Which three items are correct based on the Incident Vector Graph shown on the MARS GUI screen? (Choose three.) PassGuide.com-Make You Succeed To Pass IT Exams PassGuide 642-548
10.
Cisco Security MARS uses NetFlow data to perform which function?