Cisco Exam 500-285 Topic 3 Question 64 Discussion

Actual exam question for Cisco's 500-285 exam

Question #: 64
Topic #: 3

[All 500-285 Questions]

Which statement is true when network traffic meets the criteria specified in a correlation rule?

ANothing happens, because you cannot assign a group of rules to a correlation policy.

BThe network traffic is blocked.

CThe Defense Center generates a correlation event and initiates any configured responses.

DAn event is logged to the Correlation Policy Management table.

Show Suggested Answer

Suggested Answer: C

by Helaine at Jul 07, 2024, 07:33 PM

Limited Time Offer

25%

Off

Get Premium 500-285 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Joanna

4 months ago

I think the answer is C. It just makes the most sense to me. I mean, what's the point of having a correlation rule if it doesn't do anything when it's triggered? You'd have to be a real 'network traffic' to think otherwise.

upvoted 0 times

Fletcher

3 months ago

Exactly, that's why it's important to have effective correlation rules in place.

upvoted 0 times

...

Norah

3 months ago

That's correct, an event is logged to the Correlation Policy Management table.

upvoted 0 times

...

Lanie

3 months ago

I agree, the Defense Center generates a correlation event and initiates any configured responses.

upvoted 0 times

...

Ruby

4 months ago

I think the answer is C. It just makes the most sense to me.

upvoted 0 times

...

Odette

5 months ago

This is a tricky one. I was tempted to choose B, but blocking the network traffic doesn't seem like the right response. I'm gonna go with C, just to be on the safe side.

upvoted 0 times

Jutta

3 months ago

Yeah, I also chose C. It seems like the most logical option.

upvoted 0 times

...

Leah

4 months ago

I agree, the Defense Center generates a correlation event and initiates any configured responses.

upvoted 0 times

...

Hannah

4 months ago

I think C is the correct answer.

upvoted 0 times

...

Kendra

4 months ago

C is the right answer, the Defense Center generates a correlation event.

upvoted 0 times

...

Jose

4 months ago

I agree, C seems like the most logical choice.

upvoted 0 times

...

Glory

4 months ago

I think C is the correct answer.

upvoted 0 times

...

Sherell

5 months ago

I'm not sure, but I think D) An event is logged to the Correlation Policy Management table could also be a possible answer.

upvoted 0 times

...

Willow

5 months ago

I agree with Heike, because when network traffic meets the criteria in a correlation rule, the Defense Center should take action.

upvoted 0 times

...

Veronique

5 months ago

Hmm, I'm not sure. I'm leaning towards D, but I could be wrong. An event being logged to the Correlation Policy Management table does seem like a logical outcome.

upvoted 0 times

Alpha

4 months ago

D) An event is logged to the Correlation Policy Management table.

upvoted 0 times

...

Eladia

4 months ago

C) The Defense Center generates a correlation event and initiates any configured responses.

upvoted 0 times

...

Ben

5 months ago

I think C is the correct answer. The Defense Center should generate a correlation event and initiate any configured responses when the network traffic meets the criteria specified in the correlation rule.

upvoted 0 times