A company opens a new mid-sized branch office. Which Cisco ESA models would ideally be deployed to this office? (Choose three)
Which of the following methods describes Network mapping attack?
An organization requires a system that will meet the following requirements:- Aggregate data from any compatible network node - Produce compliance reportsWhich system would fulfill these requirements?
Which options are examples of data loss prevention solutions? (Choose two)
What is true regarding application layer proxy firewalls? (Choose two)
Which one of the following statements describes the Botnets?
Which of the following actions belong to the Initiation phase of the secure network life cycle? (Choose two)
Which option is a desirable feature of using symmetric encryption algorithms?
Which options are security services provided by digital signatures? (Choose three)
Why would an organization choose to implement a stateful packet inspection?
Recently a bookmark was created but was misconfigured. The bookmark should allow access to a shared folder located on the Intranet. Which protocol would need to be configured to allow this type of connection?
Which option is true of using cryptographic hashes?
Which option is the term for what happens when computer code is developed to take advantage of a vulnerability? For example, suppose that a vulnerability exists in a piece of software, but nobody knows about this vulnerability.
Which assessment should be performed first to determine an organization's ability to defend and respond to network attacks?
An administrator has incorrectly entered their password to gain access to privilege exec mode on a router. This generates an IDS alarm. What is this an example of?
When implementing network security, what is an important configuration task that you should perform to assist in correlating network and security events?
A client needs to telecommute from home to the office, and requires a VPN connection. Only work related traffic should traverse the tunnel, Internet traffic should not. Which technology would allow for this operation?
Which two statements are true regarding zones? (Choose two)
Which of the following are Symmetric encryption algorithms? (Choose three)
Which algorithm is commonly used as a secure method of exchanging encryption keys?
Which of the following methods describes Man-in-the-middle attack? (Choose two)
Which command is used to display established IPsec tunnels?
Which type of IPS leverages global correlation services?
Which services does an IronPort C-Series provide? (Choose two)
Which STP attack mitigation features causes an interface to be placed in an errdisabled state if a BPDU is received on that port?
Which features are most important for securing interactive and management access to an infrastructure device? (Choose four)
Which of the following describes the Data plane packets classification?
Which of the following describes the function of Cisco IronPort?
Which statements about routing update authentication are true? (Choose two)
Which two statements describe features of the state table? (Choose two)
When configuring firewall access rules, there are several things that need to be avoided, such as completeness issues, consistency issues, and compactness issues. What are two examples of completeness issues? (Choose two)
Which option is true of intrusion prevention systems?
You need to implement a high availability solution on the ASA. The solution must be able to work with units running in either single or multiple context mode. Which failover configuration should be used?
Which feature can you use to place a rate limit on traffic that is handled by a Cisco device's route processor?
Which of the following describes the Internal assessment?
Which tasks could you perform by deploying a third party MDM solution with Cisco ISE? (Choose two)
Which three of these options are some of the best practices when you implement an effective firewall security policy? (Choose three)
What is defined as a collection of networks, reachable by specific interfaces on the router?
What mode will allow the Cisco ASA to act as an additional hop in the network?
In which mode will the Cisco ASA not be seen as a hop in the network?
How is called the most time that a system resource can remain unavailable before there is an unacceptable effect?
How is called the total amount of time the system owner will accept for a business process outage?
You have learned that a Trojan was propagated to several servers in your network. However, no preventative action was taken by an IPS. What is this an example of?
Which of the following control plane security features is a Cisco IOS feature designed to allow users to manage the flow of traffic that is managed by the route processor of their network devices?
Which sensor action will cause an IPS to block the IP address of an attacker for a specified period?
Which of the following examples of security controls matches the Technical category of security controls?
Which statement about private VLANs is true?
Which of the following describes the Control plane packets classification? (Choose two)
Which statement about IPS deployments is true?
Which risk rating attribute allows you to rate how critical network components are in your infrastructure?
How is called the point in time, prior to a disruption or system outage, to which business process data can be recovered?
Security threats have evolved over time. Identity the latest generation of security threats. (Choose four)
Which failover configuration is only available on units that are running in multiple context mode when implementing high availability on the ASA?
When configuring high availability on the ASA, what two failover configurations are supported? (Choose two)
Which types of ports can support 802.1X authentication? (Choose three)