Which two statements are true regarding zones? (Choose two)
Which of the following examples of security controls matches the Administrative category of security controls? (Choose two)
Which failover configuration is only available on units that are running in multiple context mode when implementing high availability on the ASA?
Which statements about IPS and IDS deployments are true? (Choose two)
What are the steps associated with the Post-incident activity incident response phase? (Choose three)
A private contractor for the military is archiving medical records. Which classification level should be applied to these?
Select the statements that represent threats to network infrastructure. (Choose four)
What is defined as a collection of networks, reachable by specific interfaces on the router?
When configuring firewall access rules, there are several things that need to be avoided, such as completeness issues, consistency issues, and compactness issues. Which of the following are two examples of consistency issues? (Choose two)
Which type of IPS sensor offers the best protection against zero-day attacks?
How is called the most time that a system resource can remain unavailable before there is an unacceptable effect?
Which hash algorithm is vulnerable to collision attacks?
Which of the following describes the Hackers as a category of individuals who attack computer systems and operations?
Which STP attack mitigation features causes an interface to be placed in an errdisabled state if a BPDU is received on that port?
Your organization has integrated Cisco ISE with an Active Directory domain. This domain is part of a multi-domain Active Directory forest. You need to ensure that only the integrated domain can authenticate to the ISE server. What should you do?
Which of the following describes the function of Cisco IPS?
Which command could you use to determine the number TACACS+ authentication attempts that have recently timed out?
Which of the following describes the Crackers as a category of individuals who attack computer systems and operations?
Security threats have evolved over time. Identity the latest generation of security threats. (Choose four)
There is currently an issue with some clients establishing an AnyConnect SSL VPN. The affected users differ from time to time. What could help explain this problem?
Which statement best describes one of the key recommended uses for a proxy firewall?
A sensitive document was recently accessed by an unauthorized user. Specifications about a new product were changed to erroneous data. Which security principle violations have occurred in this scenario? (Choose two)
You need to implement a solution that allows administrators to perform remote wipes on mobile devices. This solution must also prevent users from connecting to endpoints with jail-broken mobile devices. What should you do?
Enter the command that will prevent a user from logging in for three minutes, if more than three incorrect logins are attempted in the span of 60 seconds.
Which option is the term for what happens when computer code is developed to take advantage of a vulnerability? For example, suppose that a vulnerability exists in a piece of software, but nobody knows about this vulnerability.
Which of the following terms best describes a network that spans multiple buildings?
Which of the following describes the function of Cisco IronPort?
Cisco SecureX is an access control strategy that allows for more effective, higher-level policy creation and enforcement for mobile users. Which of the following describes the Cisco AnyConnect Client component?
Which algorithm is commonly used as a secure method of exchanging encryption keys?
Cisco SecureX is an access control strategy that allows for more effective, higher-level policy creation and enforcement for mobile users. Which of the following describes the Cisco SIO component?
Which actions are considered best practices? (Choose two)
What mode negotiates the IKE Phase 2 SAs?
Which option is a key principle of the Cisco Self-Defending Network strategy?
Select one of the following statements that describes the availability violations threats.
Which NAT solution uses ACLs to perform address translation?
Which of the following describes the Phreakers as a category of individuals who attack computer systems and operations?
Which statements about routing update authentication are true? (Choose two)
Which tasks could you perform by deploying a third party MDM solution with Cisco ISE? (Choose two)
Which sensor action will cause an IPS to block the IP address of an attacker for a specified period?
Which of the following control plane security features extends policing functionality by allowing finer policing granularity?
Which networking technology returns a message to the same direction it was received in, in order to reach the proper destination endpoint?
Which of the following describes the External assessment?
You are planning a security policy for your network. Using the least amount of administrative effort, what should be included to help limit traffic from inside the network to outside of it?
When configuring firewall access rules, there are several things that need to be avoided, such as completeness issues, consistency issues, and compactness issues. What are two examples of completeness issues? (Choose two)
Which command is used to display established IPsec tunnels?
Which actions can you take to prevent VLAN hopping? (Choose two)
What is the purpose of GLBA information security compliance regulation?
An organization requires a system that will meet the following requirements:- Aggregate data from any compatible network node - Produce compliance reportsWhich system would fulfill these requirements?
Which of the following control plane security features provides a necessary mechanism for deploying, monitoring, and troubleshooting CPP efficiently?
Which of the following describes the Control plane packets classification? (Choose two)
What are reasons that prevent the use of SEAL? (Choose two)
Which statement about private VLANs is true?
Which two statements accurately describe how ACLs function with Cisco ASA? (Choose two)
You are reviewing syslog messages from multiple routers in your network. You have noticed irregularities with multiple syslog message timestamps for each router. Which technology can you configure to resolve this?
A client on your network is seeking advice from you in regards to the type of host-based security for their home network. They state that they have three devices, which share an Internet connection through a single home server. The home server is directly connected to the ISP router. Their main concern is primarily on traffic going through the home server to and from the other three devices. What should you recommend that would require the least amount of administrative overhead and associated set up cost?