What are requirements when integrating Cisco ISE and Active Directory? (Choose two)
Which one of the following statements describes the DoS and DDoS Attacks?
Which ESA listener would need to be configured to accept mail from a POP/IMAP system?
Which type of IPS leverages global correlation services?
Which one of the following statements describes the Botnets?
Which of the following examples of security controls matches the Physical category of security controls? (Choose two)
What are the appropriate actions during a Preparation incident response phase? (Choose three)
You need to implement a high availability solution on the ASA. The solution must be able to work with units running in either single or multiple context mode. Which failover configuration should be used?
Which statement is true when configuring access control lists (ACLs) on a Cisco router?
Which two statements are true regarding zones? (Choose two)
Which STP attack mitigation features causes an interface to be placed in an errdisabled state if a BPDU is received on that port?
Cisco SecureX is an access control strategy that allows for more effective, higher-level policy creation and enforcement for mobile users. Which of the following describes the Cisco SIO component?
Which of the following are Asymmetric encryption algorithms? (Choose two)
Which statements about DHCP snooping are true? (Choose two)
Which of the following control plane security features provides a necessary mechanism for deploying, monitoring, and troubleshooting CPP efficiently?
What technology allows for a device to have multiple virtual firewalls?
Which of the following describes the Hacktivists as a category of individuals who attack computer systems and operations?
Attacks may take a variety of forms. Which of the following describes the Enumeration and fingerprinting as a threat category?
What can be used to offload the processing of encrypted data? (Choose two)
What is the purpose of HIPAA information security compliance regulation?
Which hash algorithm is vulnerable to collision attacks?
Which of the following describes the Script kiddies as a category of individuals who attack computer systems and operations?
Which options are security services provided by digital signatures? (Choose three)
What is the goal of an overall security challenge when planning a security strategy?
A client on your network is seeking advice from you in regards to the type of host-based security for their home network. They state that they have three devices, which share an Internet connection through a single home server. The home server is directly connected to the ISP router. Their main concern is primarily on traffic going through the home server to and from the other three devices. What should you recommend that would require the least amount of administrative overhead and associated set up cost?
A transform-set must be created with the name 'test'. It should also support data confidentiality using strong DES encryption. Enter the command that would accomplish this task.
How is called the point in time, prior to a disruption or system outage, to which business process data can be recovered?
Which of the following actions belong to the Initiation phase of the secure network life cycle? (Choose two)
Which of the following describes the Phreakers as a category of individuals who attack computer systems and operations?
What are the steps associated with the Post-incident activity incident response phase? (Choose three)
Which statements about IPS and IDS deployments are true? (Choose two)
Attacks may take a variety of forms. Which of the following describes the confidentiality and integrity violations threats?
Which clients meet the browser requirements for a Cisco ASA clientless SSL VPN? (Choose two)
Which features can you enable to mitigate STP attacks? (Choose two)
In an attempt to lower the number of malware outbreaks, a company creates an e-mail filter that blocks all e-mail with attachments. Which strategy are they attempting to use?
Attacks may take a variety of forms. Which of the following describes the Spoofing as a threat category?
Which options are examples of data loss prevention solutions? (Choose two)
What mode negotiates the IKE Phase 2 SAs?
Which options describe the AH IPsec protocol? (Choose two)
Which algorithm is commonly used as a secure method of exchanging encryption keys?
During which attack phase would an attacker use e-mail to extend the attack to multiple targets?
Threats to network security have become more sophisticated over the years. Identify the next generation threats facing organizations today. (Choose four)
Which of the following are Symmetric encryption algorithms? (Choose three)
Which action should you take to prevent MAC address spoofing?
Which statement is true about application layer firewalls?
A company opens a new mid-sized branch office. Which Cisco ESA models would ideally be deployed to this office? (Choose three)
Select the statements that represent threats to network infrastructure. (Choose four)
Which type of IPS sensor offers the best protection against zero-day attacks?
Which of the following describes the Crackers as a category of individuals who attack computer systems and operations?
How is called the most time that a system resource can remain unavailable before there is an unacceptable effect?
Why would an organization choose to implement a stateful packet inspection?
Which type of attack is most likely to be used in a man-in-the-middle attack?
When implementing network security, what is an important configuration task that you should perform to assist in correlating network and security events?
Which types of ports can support 802.1X authentication? (Choose three)
Which NAT solution uses ACLs to perform address translation?