Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by Cisco
Exam Format
Registration
Validity
500-285 Exam Topics and Domains
500-285 is organized into 5 weighted domains. Expect to work with AMP for Networks, FireSIGHT Management Center, Threat Grid, Cisco Security Intelligence, and more.
Object Management
Object Types in FireSIGHT System
- Understand the types of objects that may be created and configured in object management
- Implement security intelligence feeds
- Configure application filters and variable sets
Security Intelligence
- Configure security intelligence feeds
- Implement application-based filtering
Access Control Policy
Access Control Policy Fundamentals
- Understand the purposes, configurations, and features of AC policy rules
- Determine types of traffic that will be allowed, blocked, or logged
Advanced Access Control
- Configure advanced security features in access control
- Implement file and malware policies
IPS Policy and Configuration
IPS Policy Management
- Configure and deploy IPS policies
- Tune IPS for optimal performance and accuracy
Snort Rules Language
- Understand Snort rules language syntax
- Create and manage custom IPS rules
Event Analysis
Event Investigation
- Perform in-depth event analysis
- Use FireSIGHT tools for investigation
Incident Response
- Configure incident response procedures
- Generate and customize reports
FireSIGHT Technologies and Network-Based Malware Detection
Advanced Malware Protection
- Configure network-based malware detection
- Implement file analysis and sandboxing
How do I earn this certification?
Practice with Precision
The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.
How to study for this exam?
The most effective way to prepare for 500-285 is by using the PlanetCert Simulator to practice questions and review detailed explanations.
What's changed on this exam?
- RETIRED
- Last content update: 2019-12-31
- Announcement date: 2019-06-10
- Sourcefire 3D System 5.4 (final) Last version covered before retirement • Release date: 2019-06-01
- FireSIGHT Management Center 6.2.3 (transition) Transitioned to Firepower Management Center • Release date: 2019-12-01
- Snort 2.9.x Core detection engine - evolved to Snort 3 • Release date: Various
Who should take this exam?
This exam is typically taken by Network Security Engineers and Security Analysts.
- Knowledge of TCP/IP networking
- Experience with network security concepts
- Familiarity with intrusion prevention systems
- Understanding of firewall technologies