- All Exams Instant Download
Which risk is created when using an Internet browser to access cloud-based service?
Which risk is created when using an Internet browser to access cloud-based service?A . misconfiguration of infrastructure, which allows unauthorized accessB . intermittent connection to the cloud connectorsC . vulnerabilities within protocolD . insecure implementation of APIView AnswerAnswer: C
Which two actions should be selected to allow the traffic to pass without inspection?
A Cisco Firepower administrator needs to configure a rule to allow a new application that has never been seen on the network. Which two actions should be selected to allow the traffic to pass without inspection? (Choose two)A . permitB . trustC . resetD . allowE . monitorView AnswerAnswer: B,E...
Which posture assessment requirement provides options to the client for remediation and requires the remediation within a certain timeframe?
Which posture assessment requirement provides options to the client for remediation and requires the remediation within a certain timeframe?A . AuditB . MandatoryC . OptionalD . VisibilityView AnswerAnswer: A Explanation: Reference: https://www.cisco.com/c/en/us/td/docs/security/ise/1-4/admin_guide/b_ise_admin_guide_14/b_ise_admin_guide_14_chapter_010111.html
Which solution for remote workers enables protection, detection, and response on the endpoint against known and unknown threats?
Which solution for remote workers enables protection, detection, and response on the endpoint against known and unknown threats?A . Cisco AMP for EndpointsB . Cisco AnyConnectC . Cisco UmbrellaD . Cisco DuoView AnswerAnswer: A
Which tool should be used to accomplish this goal?
A company is experiencing exfiltration of credit card numbers that are not being stored on-premise. The company needs to be able to protect sensitive data throughout the full environment. Which tool should be used to accomplish this goal?A . Security ManagerB . CloudlockC . Web Security ApplianceD . Cisco ISEView...
When planning a VPN deployment, for which reason does an engineer opt for an active/active FlexVPN configuration as opposed to DMVPN?
When planning a VPN deployment, for which reason does an engineer opt for an active/active FlexVPN configuration as opposed to DMVPN?A . Multiple routers or VRFs are required.B . Traffic is distributed statically by default.C . Floating static routes are required.D . HSRP is used for faliover.View AnswerAnswer: B
What does Cisco AMP for Endpoints use to help an organization detect different families of malware?
What does Cisco AMP for Endpoints use to help an organization detect different families of malware?A . Ethos Engine to perform fuzzy fingerprintingB . Tetra Engine to detect malware when me endpoint is connected to the cloudC . Clam AV Engine to perform email scanningD . Spero Engine with machine...
Which type of algorithm provides the highest level of protection against brute-force attacks?
Which type of algorithm provides the highest level of protection against brute-force attacks?A . PFSB . HMACC . MD5D . SHAView AnswerAnswer: D
Which type of protection encrypts RSA keys when they are exported and imported?
Which type of protection encrypts RSA keys when they are exported and imported?A . fileB . passphraseC . NGED . nonexportableView AnswerAnswer: B
What are two differences between a Cisco WSA that is running in transparent mode and one running in explicit mode? (Choose two)
What are two differences between a Cisco WSA that is running in transparent mode and one running in explicit mode? (Choose two)A . When the Cisco WSA is running in transparent mode, it uses the WSA’s own IP address as the HTTP request destination.B . The Cisco WSA responds with...
