- All Exams Instant Download
Which mechanism should the engineer configure to accomplish this goal?
An engineer needs behavioral analysis to detect malicious activity on the hosts, and is configuring the organization's public cloud to send telemetry using the cloud provider's mechanisms to a security device. Which mechanism should the engineer configure to accomplish this goal?A . mirror portB . NetFlowC . FlowD . VPC...
Which two conditions are prerequisites for stateful failover for IPsec? (Choose two.)
Which two conditions are prerequisites for stateful failover for IPsec? (Choose two.)A . Only the IKE configuration that is set up on the active device must be duplicated on the standby device; the IPsec configuration is copied automatically.B . The active and standby devices can run different versions of the...
Which two tasks allow NetFlow on a Cisco ASA 5500 Series firewall? (Choose two.)
Which two tasks allow NetFlow on a Cisco ASA 5500 Series firewall? (Choose two.)A . Create an ACL to allow UDP traffic on port 9996.B . Enable NetFlow Version 9.C . Create a class map to match interesting traffic.D . Apply NetFlow Exporter to the outside interface in the inbound...
Which cloud service model offers an environment for cloud consumers to develop and deploy applications without needing to manage or maintain the underlying cloud infrastructure?
Which cloud service model offers an environment for cloud consumers to develop and deploy applications without needing to manage or maintain the underlying cloud infrastructure?A . PaasB . XaasC . IaasD . SaasView AnswerAnswer: A
Which Cisco ASA command must be used?
An engineer wants to generate NetFlow records on traffic traversing the Cisco ASA . Which Cisco ASA command must be used? A. flow exporter <name> B. ip flow monitor<name> input C. ip flow-export destination 1.1.1.1 2055 D. flow-export destination inside 1.1.1.1 2055View AnswerAnswer: D
Drag and drop the Firepower Next Generation Intrustion Prevention System detectors from the left onto the correct definitions on the right.
Drag and drop the Firepower Next Generation Intrustion Prevention System detectors from the left onto the correct definitions on the right. View AnswerAnswer: Explanation: Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-configguide-v64/detecti
Which feature within Cisco Umbrella allows for the ability to inspect secure HTTP traffic?
Which feature within Cisco Umbrella allows for the ability to inspect secure HTTP traffic?A . File AnalysisB . SafeSearchC . SSL DecryptionD . Destination ListsView AnswerAnswer: C
The main function of northbound APIs in the SDN architecture is to enable communication between which two areas of a network?
The main function of northbound APIs in the SDN architecture is to enable communication between which two areas of a network?A . SDN controller and the cloudB . management console and the SDN controllerC . management console and the cloudD . SDN controller and the management solutionView AnswerAnswer: D
Which command was used to generate this output and to show which ports are authenticating with dot1x or mab?
Refer to the exhibit. Which command was used to generate this output and to show which ports are authenticating with dot1x or mab?A . show authentication registrationsB . show authentication methodC . show dot1x allD . show authentication sessionsView AnswerAnswer: D
Which port on the firewall must be opened to allow the CoA traffic to traverse the network?
An engineer is configuring 802.1X authentication on Cisco switches in the network and is using CoA as a mechanism . Which port on the firewall must be opened to allow the CoA traffic to traverse the network?A . TCP 6514B . UDP 1700C . TCP 49D . UDP 1812View AnswerAnswer:...
