Which of the following alert actions can be transmitted to a use as notification that a Cisco Security MARS rule has fired and that an incident has been logged? (Choose two.)

Which additional steps should you take after manually adding the BR-FW-1 device shown in the MARS GUI screen?

PassGuide 642-545

Which two alert actions can notify a user that a Cisco Security MARS rule has fired, and that an incident has been logged? (Choose two.)

In order to enable the Cisco Security MARS appliance to perform mitigation, which two configuration options are correct? (Choose two.)

Which action enables the Cisco Security MARS appliance to ignore false-positive events by either dropping the events completely or by just logging them to the database?

Here is a question that you need to answer. You can click on the Question button to the left to view the question and click on the MARS GUI Screen button to the left to capture the MARS GUI screen in order to answer the question. While viewing the GUI screen capture, you can view the complete screen by use of the left/right scroll bar on the bottom of the GUI screen. Choose the correct answer from among the options. What actions will you take to configure the MARS appliance to send out an alert when the system rule fires according to the MARS GUI screen shown?

PassGuide 642-545

Which two configuration tasks are needed on the Cisco Security MARS for it to receive syslog messages relayed from a syslog relay server? (Choose two.)

Which statement best describes the case management feature of Cisco Security MARS?

What is the reporting IP address of the device while adding a device to the Cisco Security MARS appliance?

Which two options are for handling false-positive events reported by the Cisco Security MARS appliance? (Choose two.)