Which statement about IPS deployments is true?
Which option is the term for a weakness in a system or its design that can be exploited by a threat?
You have noticed that an access switch is forwarding traffic out of all interfaces. Which type of attack is likely occurring?
Which option is the term for what happens when computer code is developed to take advantage of a vulnerability? For example, suppose that a vulnerability exists in a piece of software, but nobody knows about this vulnerability.
During which attack phase would an attacker use e-mail to extend the attack to multiple targets?
Which one of the following statements describes the DoS and DDoS Attacks?
A transform-set must be created with the name 'test'. It should also support data confidentiality using strong DES encryption. Enter the command that would accomplish this task.
Which type of IPS leverages global correlation services?
Which statements about IPS and IDS deployments are true? (Choose two)
During which attack phase would an attacker use a provision such as registry edits to keep the malware on the system?
A client on your network is seeking advice from you in regards to the type of host-based security for their home network. They state that they have three devices, which share an Internet connection through a single home server. The home server is directly connected to the ISP router. Their main concern is primarily on traffic going through the home server to and from the other three devices. What should you recommend that would require the least amount of administrative overhead and associated set up cost?
Which of the following describes the Hacktivists as a category of individuals who attack computer systems and operations?
Which types of attacks can be mitigated by implementing port security? (Choose two)
What command can you run to verify that IOS resilient configuration is properly working?
Which of the following describes the function of Cisco IPS?
Which of the following are Symmetric encryption algorithms? (Choose three)
Which options are security services provided by digital signatures? (Choose three)
Which are ways to combat social based attacks? (Choose two)
Which option is a key principle of the Cisco Self-Defending Network strategy?
How does a stateful packet filtering firewall use a state table to improve the performance of routing?
RADIUS and TACACS+ are both commonly used to control network access. Which of the following describes the function of TACACS+? (Choose three)
A company opens a new mid-sized branch office. Which Cisco ESA models would ideally be deployed to this office? (Choose three)
What mode negotiates the IKE Phase 2 SAs?
You need to implement a solution that allows administrators to perform remote wipes on mobile devices. This solution must also prevent users from connecting to endpoints with jail-broken mobile devices. What should you do?
Which of the following describes the Security posture assessment?
Cisco SecureX is an access control strategy that allows for more effective, higher-level policy creation and enforcement for mobile users. Which of the following describes the Cisco AnyConnect Client component?
Which command could you use to determine the number TACACS+ authentication attempts that have recently timed out?
Which of the following describes the Script kiddies as a category of individuals who attack computer systems and operations?
Which of these options is a Cisco IOS feature that lets you more easily configure security features on your router?
Which options describe the AH IPsec protocol? (Choose two)
You need to ensure that CDP is only enabled on interfaces that are connected to a trusted network. CDP must be disabled on all other interfaces. What should you do?
Which of the following methods describes Man-in-the-middle attack? (Choose two)
Attacks may take a variety of forms. Which of the following describes the Spoofing as a threat category?
Which of the following describes the Control plane packets classification? (Choose two)
Which of the following describes the Hackers as a category of individuals who attack computer systems and operations?
What is the first step you should take when considering securing your network?
You have noticed several workstations have been configured with an incorrect default gateway. Which type of attack is likely occurring?
What are reasons that prevent the use of SEAL? (Choose two)
Suppose you want to change the minimum password length using the CLI from Cisco Configuration Professional. What should you do first?
Which IDS sensor action will send an ARC response to completely block the attacker's IP address?
What technology allows for a device to have multiple virtual firewalls?
An administrator has incorrectly entered their password to gain access to privilege exec mode on a router. This generates an IDS alarm. What is this an example of?
You need to implement a high availability solution on the ASA. The solution must be able to work with units running in either single or multiple context mode. Which failover configuration should be used?
You have several operating groups in your enterprise that require differing access restrictions to the routers to perform their job roles. These groups range from Help Desk personnel to advanced troubleshooters. What is one methodology for controlling access rights to the routers in these situations?
To verify the clientless SSL VPN, a compliant browser has been opened. Which prefix is the path changed to if the object does not require authentication?
Which statement best describes an inside local address?
Which actions are considered best practices? (Choose two)
You have learned that a Trojan was propagated to several servers in your network. However, no preventative action was taken by an IPS. What is this an example of?
Which hash algorithm is capable of a 512 bit message digest?
Which of the following describes the Phreakers as a category of individuals who attack computer systems and operations?
Which statement is true about application layer firewalls?
Which tasks could you perform by deploying a third party MDM solution with Cisco ISE? (Choose two)
Why would an organization choose to implement a stateful packet inspection?
There is currently an issue with some clients establishing an AnyConnect SSL VPN. The affected users differ from time to time. What could help explain this problem?
Which command is used to display established IPsec tunnels?