Download Implementing and Operating Cisco Security Core Technologies.PassLeader.350-701.2022-06-12.1e.273q.vcex

What are two list types within AMP for Endpoints Outbreak Control? (Choose two.)

• A: blocked ports
• B: simple custom detections
• C: command and control
• D: allowed applications
• E: URL

Correct Answer: BD

     

For which two conditions can an endpoint be checked using ISE posture assessment? (Choose two.)

• A: computer identity
• B: Windows service
• C: user identity
• D: Windows firewall
• E: default browser

Correct Answer: BD

     

Which Cisco product provides proactive endpoint protection and allows administrators to centrally manage the deployment?

• A: NGFW
• B: AMP
• C: WSA
• D: ESA

Correct Answer: B

     

     

Where are individual sites specified to be blacklisted in Cisco Umbrella?

• A: application settings
• B: content categories
• C: security settings
• D: destination lists

Correct Answer: D

     

Which two activities can be done using Cisco DNA Center? (Choose two.)

• A: DHCP
• B: design
• C: accounting
• D: DNS
• E: provision

Correct Answer: BE

     

Which ID store requires that a shadow user be created on Cisco ISE for the admin login to work?

• A: RSA SecureID
• B: Internal Database
• C: Active Directory
• D: LDAP

Correct Answer: C

     

Which VPN technology can support a multivendor environment and secure traffic between sites?

• A: SSL VPN
• B: GET VPN
• C: FlexVPN
• D: DMVPN

Correct Answer: C

     

Which SNMPv3 configuration must be used to support the strongest security possible?

• A: asa-host(config)#snmp-server group myv3 v3 privasa-host(config)#snmp-server user andy myv3 auth sha cisco priv des ciscXXXXXXXX
  asa-host(config)#snmp-server host inside 10.255.254.1 version 3 andy
• B: asa-host(config)#snmp-server group myv3 v3 noauthasa-host(config)#snmp-server user andy myv3 auth sha cisco priv aes 256 ciscXXXXXXXX
  asa-host(config)#snmp-server host inside 10.255.254.1 version 3 andy
• C: asa-host(config)#snmp-server group myv3 v3 noauthasa-host(config)#snmp-server user andy myv3 auth sha cisco priv 3des ciscXXXXXXXX
  asa-host(config)#snmp-server host inside 10.255.254.1 version 3 andy
• D: asa-host(config)#snmp-server group myv3 v3 privasa-host(config)#snmp-server user andy myv3 auth sha cisco priv aes 256 ciscXXXXXXXX
  asa-host(config)#snmp-server host inside 10.255.254.1 version 3 andy

Correct Answer: D

AES allows you to choose a 128-bit, 192-bit or 256-bit key, making it exponentially stronger than the 56-bit key of DES.

     

     

Which solution combines Cisco IOS and IOS XE components to enable administrators to recognize applications, collect and send network metrics to Cisco Prime and other third-party management tools, and prioritize application traffic?

• A: Cisco Security Intelligence
• B: Cisco Application Visibility and Control
• C: Cisco Model Driven Telemetry
• D: Cisco DNA Center

Correct Answer: B

     

Which two endpoint measures are used to minimize the chances of falling victim to phishing and social engineering attacks? (Choose two.)

• A: Patch for cross-site scripting.
• B: Perform backups to the private cloud.
• C: Protect against input validation and character escapes in the endpoint.
• D: Install a spam and virus email filter.
• E: Protect systems with an up-to-date antimalware program.

Correct Answer: DE