You are planning a security policy for your network. Using the least amount of administrative effort, what should be included to help limit traffic from inside the network to outside of it?
Which of the following control plane security features provides a necessary mechanism for deploying, monitoring, and troubleshooting CPP efficiently?
A company opens a new mid-sized branch office. Which Cisco ESA models would ideally be deployed to this office? (Choose three)
Which options are necessary elements of an effective computer security awareness and training program? (Choose five)
Which of the following describes the Control plane packets classification? (Choose two)
Which of the following describes the Phreakers as a category of individuals who attack computer systems and operations?
How does a stateful packet filtering firewall use a state table to improve the performance of routing?
Which option correctly defines asymmetric encryption?
Which options are security services provided by digital signatures? (Choose three)
When configuring firewall access rules, there are several things that need to be avoided, such as completeness issues, consistency issues, and compactness issues. What are two examples of completeness issues? (Choose two)
Which of these options is a GUI tool for performing security configurations on Cisco routers?
Which three of these options are some of the best practices when you implement an effective firewall security policy? (Choose three)
Which statements describe in-band management? (Choose two)
What mode negotiates the IKE Phase 2 SAs?
Which two statements accurately describe how ACLs function with Cisco ASA? (Choose two)
Which 802.1X component would refer to an endpoint in an 802.1X infrastructure?
Which services does an IronPort C-Series provide? (Choose two)
Which three options are areas of router security? (Choose three)
Which of the following actions belong to the Initiation phase of the secure network life cycle? (Choose two)
Enter the command that will prevent a user from logging in for three minutes, if more than three incorrect logins are attempted in the span of 60 seconds.
Which STP attack mitigation features causes an interface to be placed in an errdisabled state if a BPDU is received on that port?
When configuring firewall access rules, there are several things that need to be avoided, such as completeness issues, consistency issues, and compactness issues. Which of the following are two examples of consistency issues? (Choose two)
Cisco SecureX is an access control strategy that allows for more effective, higher-level policy creation and enforcement for mobile users. Which of the following describes the Cisco AnyConnect Client component?
What are the steps associated with the Containment, eradication, and recovery incident response phase? (Choose three)
Attacks may take a variety of forms. Which of the following describes the Phishing, pharming, and identify theft?
Which NAT solution uses ACLs to perform address translation?
Which actions can you take on a router to secure NTP in your network? (Choose two)
Which statement about IPS deployments is true?
During which attack phase would an attacker use e-mail to extend the attack to multiple targets?
You are asked to configure SNMPv3 inside your network. An ACL named snmpacl, which specifies the IP addresses, has already been created, and will be able to perform SNMP queries. Which command would you enter to create a group named SNMPgroup which can send encrypted SNMP queries?
A client e-mails their broker telling them to invest $100,000 in a new startup company. The company performs poorly and the client loses the bulk of the money. They take the broker to court, stating they did not issue the purchase order. What could the broker have done to protect themselves?
Which options are examples of data loss prevention solutions? (Choose two)
To verify the clientless SSL VPN, a compliant browser has been opened. Which prefix is the path changed to if the object does not require authentication?
Which statement is true regarding zone based firewalls in which traffic passes between zones?
Which clients meet the browser requirements for a Cisco ASA clientless SSL VPN? (Choose two)
Which of the following describes the Crackers as a category of individuals who attack computer systems and operations?
What is considered the number one criterion when classifying data for either the private or public sector?
What are requirements when integrating Cisco ISE and Active Directory? (Choose two)
Which option is a key principle of the Cisco Self-Defending Network strategy?
Which of these options is a Cisco IOS feature that lets you more easily configure security features on your router?
Which of the following methods describes Network mapping attack?
You need to ensure that CDP is only enabled on interfaces that are connected to a trusted network. CDP must be disabled on all other interfaces. What should you do?
During which attack phase would an attacker use a provision such as registry edits to keep the malware on the system?
Which statements accurately describe characteristics of the Cisco borderless networks architecture? (Choose two)
Which option is the term for the likelihood that a particular threat using a specific attack will exploit a particular vulnerability of a system that results in an undesirable consequence?
What are the easiest methods for blocking access to a specific site? (Choose two)
Which tasks could you perform by deploying a third party MDM solution with Cisco ISE? (Choose two)
Which two statements are true regarding zones? (Choose two)
Attacks may take a variety of forms. Which of the following describes the Spoofing as a threat category?
How is called the total amount of time the system owner will accept for a business process outage?
Which failover configuration is only available on units that are running in multiple context mode when implementing high availability on the ASA?
Which statement is true about application layer firewalls?
What is the purpose of Sarbanes-Oxley information security compliance regulation?
Which of the following actions belong to the Disposition phase of the secure network life cycle? (Choose two)
Which of the following control plane security features allows users to configure a QoS filter to restrict the flow of control plane packets?