Which technology requires that SSH and AAA are configured before it can work?
How does a stateful packet filtering firewall use a state table to improve the performance of routing?
A company opens a new mid-sized branch office. Which Cisco ESA models would ideally be deployed to this office? (Choose three)
Which of the following actions belong to the Operations and maintenance phase of the secure network life cycle? (Choose two)
A tunnel has been created and established with a branch office. You need to verify that traffic is traversing the connection. Which command will provide this information?
You are asked to configure SNMPv3 inside your network. An ACL named snmpacl, which specifies the IP addresses, has already been created, and will be able to perform SNMP queries. Which command would you enter to create a group named SNMPgroup which can send encrypted SNMP queries?
You need to ensure that CDP is only enabled on interfaces that are connected to a trusted network. CDP must be disabled on all other interfaces. What should you do?
Which three of these options are some of the best practices when you implement an effective firewall security policy? (Choose three)
To verify the clientless SSL VPN, a compliant browser has been opened. Which prefix is the path changed to if the object requires authentication?
Network security aims to provide which three key services? (Choose three)
Attacks may take a variety of forms. Which of the following describes the Blended threats as a threat category?
Which clients meet the browser requirements for a Cisco ASA clientless SSL VPN? (Choose two)
What is the goal of an overall security challenge when planning a security strategy?
You have learned that a Trojan was propagated to several servers in your network. However, no preventative action was taken by an IPS. What is this an example of?
Which of the following describes the Phreakers as a category of individuals who attack computer systems and operations?
A client on your network is seeking advice from you in regards to the type of host-based security for their home network. They state that they have three devices, which share an Internet connection through a single home server. The home server is directly connected to the ISP router. Their main concern is primarily on traffic going through the home server to and from the other three devices. What should you recommend that would require the least amount of administrative overhead and associated set up cost?
Which feature can you use to place a rate limit on traffic that is handled by a Cisco device's route processor?
Which of the actions are possible using Cisco Configuration Professional Express?
Which of the following describes the function of Cisco ScanSafe?
What technology allows for a device to have multiple virtual firewalls?
Which of these options is a GUI tool for performing security configurations on Cisco routers?
You need to implement a high availability solution on the ASA. The solution must be able to work with units running in either single or multiple context mode. Which failover configuration should be used?
Which 802.1X component would refer to an endpoint in an 802.1X infrastructure?
Which STP attack mitigation features causes an interface to be placed in an errdisabled state if a BPDU is received on that port?
How is called the total amount of time the system owner will accept for a business process outage?
Which option is the term for what happens when computer code is developed to take advantage of a vulnerability? For example, suppose that a vulnerability exists in a piece of software, but nobody knows about this vulnerability.
Security threats have evolved over time. Identity the latest generation of security threats. (Choose four)
Which ESA listener would need to be configured to accept mail from a POP/IMAP system?
Which three options are areas of router security? (Choose three)
Which actions can you take to prevent VLAN hopping? (Choose two)
Which statement is true when configuring access control lists (ACLs) on a Cisco router?
An intruder sends messages to a computer with an IP address that indicates that the message is coming from a trusted host. The hacker learns the IP address of a trusted host and modifies the packet headers so that apparently the packets are coming from that trusted host. How would you categorize this attack?
Which technologies can perform RADIUS and TACACS+ authentication? (Choose two)
Which of the following describes the function of Cisco ASA?
Which of the options are primary reasons for an attacker to perform an IP spoofing attack? (Choose two)
RADIUS and TACACS+ are both commonly used to control network access. Which of the following describes the function of RADIUS? (Choose three)
Attacks may take a variety of forms. Which of the following describes the Phishing, pharming, and identify theft?
Which statement is true when using zone-based firewalls on a Cisco router?
Select the statements that represent threats to network infrastructure. (Choose four)
Which of the following describes the Hackers as a category of individuals who attack computer systems and operations?
What is true regarding application layer proxy firewalls? (Choose two)
Which statements about DHCP snooping are true? (Choose two)
Which statement about role-based CLI access is true?
What are the appropriate actions during a Detection and analysis incident response phase? (Choose three)
Which actions occur during the implementation phase of the secure network life cycle? (Choose three)
Which option is a desirable feature of using symmetric encryption algorithms?
A transform-set must be created with the name 'test'. It should also support data confidentiality using strong DES encryption. Enter the command that would accomplish this task.
You are reviewing syslog messages from multiple routers in your network. You have noticed irregularities with multiple syslog message timestamps for each router. Which technology can you configure to resolve this?
Which IDS sensor action will send an ARC response to completely block the attacker's IP address?
Which command is used to display established IPsec tunnels?
Which of the following control plane security features provides a necessary mechanism for deploying, monitoring, and troubleshooting CPP efficiently?
Which two statements describe features of the state table? (Choose two)
Which threats are the most serious?
Attacks may take a variety of forms. Which of the following describes the Enumeration and fingerprinting as a threat category?
Which are ways to combat social based attacks? (Choose two)