QUESTION 161
Which two tasks allow Net=low on a Cisco ASA 5500 Series firewall? (Choose two.)
A. Define a NetFlow collector by using the flow-export command
B. Create an ACL to allow UDP traffic on port 9996
C. Enable NetFlow Version 9
D. Apply NetFlow Exporter to the outside interface in the inbound direction
E. Create a class map to match interesting traffic
Correct Answer: CE
QUESTION 162
Which security product enables administrators to deploy Kubernetes clusters in air-gapped sites without needing Internet access?
A. Cisco Cloud Platform
B. Cisco Container Controller
C. Cisco Content Platform
D. Cisco Container Platform
Correct Answer: D
QUESTION 163
An engineer needs to configure an access control policy rule to always send traffic for inspection without using the default action. Which action should be configured for this rule?
A. allow
B. block
C. monitor
D. trust
Correct Answer: A
QUESTION 164
What is the term for when an endpoint is associated to a provisioning WLAN that is shared with guest access, and the same guest portal is used as the BYOD portal?
A. streamlined access
B. multichannel GUI
C. single-SSID BYOD
D. dual-SSID BYOD
Correct Answer: D
QUESTION 165
Based on the NIST 800-145 guide, which cloud architecture is provisioned for exclusive use by a specific group of consumers from different organizations and may be owned, managed, and operated by one or more of those organizations?
A. hybrid cloud
B. public cloud
C. private cloud
D. community cloud
Correct Answer: D
QUESTION 166
Which Cisco ISE feature helps to detect missing patches and helps with remediation?
A. posture assessment
B. profiling policy
C. enabling probes
D. authentication policy
Correct Answer: A
QUESTION 167
Which Cisco security solution integrates with cloud applications like Dropbox and Office 365 while protecting data from being exfiltrated?
A. Cisco Umbrella Investigate
B. Cisco Talos
C. Cisco Stealthwatch Cloud
D. Cisco Cloudlock
Correct Answer: D
QUESTION 168
Which Cisco security platform is integrated into an organization’s cloud environment on AWS, Google Cloud, or Azure to provide agentless visibility across the network by using advanced machine learning and behavioral analytics?
A. Cisco ISE Cloud
B. Cisco AMP Cloud
C. Cisco ASAv
D. Cisco Stealthwatch Cloud
Correct Answer: D
QUESTION 169
An engineer is configuring Cisco WSA and needs to deploy it in transparent mode. Which configuration component must be used to accomplish this goal?
A. PBR on Cisco WSA
B. DNS resolution on Cisco WSA
C. MDA on the router
D. WCCP on switch
Correct Answer: D
QUESTION 170
Which two Cisco technologies enable transparent user identification on a Cisco Secure Web Appliance? (Choose two.)
A. Cisco ACS
B. Cisco Prime Infrastructure
C. Cisco CSM
D. Cisco CDA
E. Cisco ISE
Correct Answer: AE
QUESTION 171
What is a difference between Cisco AMP for Endpoints and Cisco Umbrella?
A. AMP for Endpoints is a cloud-based service, and Umbrella is not.
B. AMP for Endpoints automatically researches indicators of compromise and confirms threats, and Umbrella does not
C. AMP for Endpoints prevents, detects, and responds to attacks before damage can be done, and Umbrella provides the first line of defense against Internet threats.
D. AMP for Endpoints prevents connections to malicious destinations, and Umbrella works at the file level to prevent the initial execution of malware.
Correct Answer: C
QUESTION 172
Which solution is made from a collection of secure development practices and guidelines that developers must follow to build secure applications?
A. AFL
B. Fuzzing Framework
C. Radamsa
D. OWASP
Correct Answer: D
QUESTION 173
What is a characteristic of Cisco ASA NetFlow v9 Secure Event Logging?
A. It provides stateless IP flow tracking that exports all records of a specific flow.
B. It tracks the flow continuously and provides updates every 10 seconds.
C. Its events match all traffic classes in parallel
D. It tracks flow-create, flow-teardown, and flow-denied events
Correct Answer: D
QUESTION 174
The main function of northbound APIs in the SDN architecture is to enable communication between which two areas of a network?
A. management console and the SDN controller
B. SDN controller and the cloud
C. SDN controller and the management solution
D. management console and the cloud
Correct Answer: C
QUESTION 175
Which IPsec mode must be used when encrypting data over a public network between two servers with RFC1918 IP addresses?
A. main mode
B. aggressive mode
C. tunnel mode
D. transport mode
Correct Answer: C
QUESTION 176
Which platform uses Cyber Threat Intelligence as its main source of information?
A. Cisco Secure Endpoint
B. Cisco ASA
C. EPP
D. EDR
Correct Answer: A
QUESTION 177
Which Cisco command enables authentication, authorization, and accounting globally so that CoA is supported on the device?
A. aaa server radius dynamic-author
B. auth-type all
C. aaa new-model
D. ip device-tracking
Correct Answer: C
QUESTION 178
An organization has had some malware infections recently and the management team wants to use Cisco Secure Firewall to enforce file policies to prevent malicious files from being downloaded. The SHA-256 hash value of all files traversing the firewall must be calculated and compared to the hash values of known malware code. Which file rule action is used to block only the files that are confirmed to be malware?
A. Detect Files
B. Block Malware
C. Block Files
D. Malware Cloud Lookup
Correct Answer: B
QUESTION 179
Which Cisco firewall solution supports configuration via Cisco Policy Language?
A. ZFW
B. NGIPS
C. NGFW
D. CBAC
Correct Answer: A
QUESTION 180
An engineer is configuring DHCP snooping on a Cisco switch and wants to ensure that a DHCP packet will be dropped. Under which condition will this occur?
A. A packet from a DHCP server is received from inside the network or firewall.
B. All packets are dropped until the administrator manually enters the approved servers into the DHCP snooping database.
C. A DHCP relay agent forwards a DHCP packet that includes a relay-agent IP address that is 0.0.0.0.
D. A packet is received on an untrusted interface, and the source MAC address and the DHCP client hardware address do not match.
Correct Answer: D