Which tasks could you perform by deploying a third party MDM solution with Cisco ISE? (Choose two)
Cisco SecureX is an access control strategy that allows for more effective, higher-level policy creation and enforcement for mobile users. Which of the following describes the Context awareness component?
Attacks may take a variety of forms. Which of the following describes the Man-in-the-middle attack?
Which types of attacks can be mitigated by implementing port security? (Choose two)
Which of these options is a Cisco IOS feature that lets you more easily configure security features on your router?
You need to implement a high availability solution on the ASA. The solution must be able to work with units running in either single or multiple context mode. Which failover configuration should be used?
Which of the following are Asymmetric encryption algorithms? (Choose two)
Cisco SecureX is an access control strategy that allows for more effective, higher-level policy creation and enforcement for mobile users. Which of the following describes the Cisco SIO component?
Enter the command that will prevent a user from logging in for three minutes, if more than three incorrect logins are attempted in the span of 60 seconds.
Which actions are considered best practices? (Choose two)
RADIUS and TACACS+ are both commonly used to control network access. Which of the following describes the function of TACACS+? (Choose three)
You need to be able to prevent users from entering global configuration mode unless they have the necessary privilege level. Which actions can you take to accomplish this? (Choose two)
Which feature can you use to place a rate limit on traffic that is handled by a Cisco device's route processor?
You have noticed several workstations have been configured with an incorrect default gateway. Which type of attack is likely occurring?
Which of these options is a GUI tool for performing security configurations on Cisco routers?
Cisco SecureX is an access control strategy that allows for more effective, higher-level policy creation and enforcement for mobile users. Which of the following describes the Cisco AnyConnect Client component?
Which of the following examples of security controls matches the Physical category of security controls? (Choose two)
During which attack phase would an attacker use e-mail to extend the attack to multiple targets?
Which options are necessary elements of an effective computer security awareness and training program? (Choose five)
Which statements describe in-band management? (Choose two)
Which features can you enable to mitigate STP attacks? (Choose two)
Which actions belong to the operations and maintenance phase of the secure network life cycle? (Choose two)
Which statement best describes one of the key recommended uses for a proxy firewall?
Select one of the following statements that describes the password attacks.
What can be used to offload the processing of encrypted data? (Choose two)
Which of the following are Symmetric encryption algorithms? (Choose three)
Select one of the following statements that describes the availability violations threats.
Which clients meet the browser requirements for a Cisco ASA clientless SSL VPN? (Choose two)
How is called the total amount of time the system owner will accept for a business process outage?
Attacks may take a variety of forms. Which of the following describes the confidentiality and integrity violations threats?
Which statement best describes an inside local address?
When configuring firewall access rules, there are several things that need to be avoided, such as completeness issues, consistency issues, and compactness issues. What are two examples of completeness issues? (Choose two)
Select one of the following statements that describes the trust exploitation threats.
An administrator has incorrectly entered their password to gain access to privilege exec mode on a router. This generates an IDS alarm. What is this an example of?
Which actions can you take on a router to secure NTP in your network? (Choose two)
Which two statements describe features of the state table? (Choose two)
Which statements describe the functions of the Security Audit feature? (Choose four)
Attacks may take a variety of forms. Which of the following describes the Spoofing as a threat category?
Which technologies can perform RADIUS and TACACS+ authentication? (Choose two)
Which IDS sensor action will send an ARC response to completely block the attacker's IP address?
Recently a bookmark was created but was misconfigured. The bookmark should allow access to a shared folder located on the Intranet. Which protocol would need to be configured to allow this type of connection?
Which of the following describes the Data plane packets classification?
Which command could you use to determine the number TACACS+ authentication attempts that have recently timed out?
Which one of the following statements describes the Botnets?
Select the statements that represent threats to network infrastructure. (Choose four)
Which actions occur during the implementation phase of the secure network life cycle? (Choose three)
Cisco SecureX is an access control strategy that allows for more effective, higher-level policy creation and enforcement for mobile users. Which of the following describes the Cisco TrustSec function component?
You are planning a security policy for your network. Using the least amount of administrative effort, what should be included to help limit traffic from inside the network to outside of it?
A technician is setting up a SOHO for a client. The client will be using a VPN to connect to their office. Which routers are recommended for this topology? (Choose two)
Which option is the term for a weakness in a system or its design that can be exploited by a threat?
Which statement is true about application layer firewalls?
A sensitive document was recently accessed by an unauthorized user. Specifications about a new product were changed to erroneous data. Which security principle violations have occurred in this scenario? (Choose two)
Which of the following methods describes Network mapping attack?
Which are ways to combat social based attacks? (Choose two)
A client needs to telecommute from home to the office, and requires a VPN connection. Only work related traffic should traverse the tunnel, Internet traffic should not. Which technology would allow for this operation?