Which technologies can perform RADIUS and TACACS+ authentication? (Choose two)
Which statements about IPS and IDS deployments are true? (Choose two)
You have noticed several workstations have been configured with an incorrect default gateway. Which type of attack is likely occurring?
RADIUS and TACACS+ are both commonly used to control network access. Which of the following describes the function of TACACS+? (Choose three)
Which feature can you use to place a rate limit on traffic that is handled by a Cisco device's route processor?
Which command is used to display established IPsec tunnels?
Which of the following control plane security features extends policing functionality by allowing finer policing granularity?
You have noticed that an access switch is forwarding traffic out of all interfaces. Which type of attack is likely occurring?
Your organization has integrated Cisco ISE with an Active Directory domain. This domain is part of a multi-domain Active Directory forest. You need to ensure that only the integrated domain can authenticate to the ISE server. What should you do?
Which statement about private VLANs is true?
Which recommendations follow defense-in-depth principles? (Choose two)
Select the statements that define the unique components of Cisco Configuration Professional used for security policy deployment. (Choose three)
Which type of IPS leverages global correlation services?
Attacks may take a variety of forms. Which of the following describes the Man-in-the-middle attack?
Select one of the following statements that describes the availability violations threats.
Which hash algorithm uses complex sequence of relatively simple binary operations?
Which of the following actions belong to the Operations and maintenance phase of the secure network life cycle? (Choose two)
Which of the following describes the Hacktivists as a category of individuals who attack computer systems and operations?
During which attack phase would an attacker use e-mail to extend the attack to multiple targets?
How is called the point in time, prior to a disruption or system outage, to which business process data can be recovered?
Which of the following are Symmetric encryption algorithms? (Choose three)
Which networking technology returns a message to the same direction it was received in, in order to reach the proper destination endpoint?
Which two statements accurately describe how ACLs function with Cisco ASA? (Choose two)
What are some of the security functions that can be managed using Cisco Configuration Professional? (Choose five)
You are reviewing syslog messages from multiple routers in your network. You have noticed irregularities with multiple syslog message timestamps for each router. Which technology can you configure to resolve this?
You need to implement a solution that allows administrators to perform remote wipes on mobile devices. This solution must also prevent users from connecting to endpoints with jail-broken mobile devices. What should you do?
Which of the following describes the Script kiddies as a category of individuals who attack computer systems and operations?
Enter the command that will prevent a user from logging in for three minutes, if more than three incorrect logins are attempted in the span of 60 seconds.
Which statements describe in-band management? (Choose two)
Which type of attack is most likely to be used in a man-in-the-middle attack?
Which of the following actions belong to the Initiation phase of the secure network life cycle? (Choose two)
Which of the actions are possible using Cisco Configuration Professional Express?
Which statements about DHCP snooping are true? (Choose two)
Which tasks could you perform by deploying a third party MDM solution with Cisco ISE? (Choose two)
Which of the following control plane security features provides a necessary mechanism for deploying, monitoring, and troubleshooting CPP efficiently?
What are requirements when integrating Cisco ISE and Active Directory? (Choose two)
A client e-mails their broker telling them to invest $100,000 in a new startup company. The company performs poorly and the client loses the bulk of the money. They take the broker to court, stating they did not issue the purchase order. What could the broker have done to protect themselves?
What are the appropriate actions during a Preparation incident response phase? (Choose three)
Which sensor action will cause an IPS to block the IP address of an attacker for a specified period?
Which risk rating attribute allows you to rate how critical network components are in your infrastructure?
Threats to network security have become more sophisticated over the years. Identify the next generation threats facing organizations today. (Choose four)
Which IDS sensor action will send an ARC response to completely block the attacker's IP address?
An administrator has incorrectly entered their password to gain access to privilege exec mode on a router. This generates an IDS alarm. What is this an example of?
Which of the following describes the Phreakers as a category of individuals who attack computer systems and operations?
What is the first step you should take when considering securing your network?
Cisco SecureX is an access control strategy that allows for more effective, higher-level policy creation and enforcement for mobile users. Which of the following describes the Cisco AnyConnect Client component?
Recently a bookmark was created but was misconfigured. The bookmark should allow access to a shared folder located on the Intranet. Which protocol would need to be configured to allow this type of connection?
You are planning a security policy for your network. Using the least amount of administrative effort, what should be included to help limit traffic from inside the network to outside of it?
During which attack phase would an attacker use a provision such as registry edits to keep the malware on the system?
Which failover configuration is only available on units that are running in multiple context mode when implementing high availability on the ASA?
Which Cisco Borderless Networks Security Architecture specifically protects end devices from malware?
Which of the following describes the External assessment?
Which security features rely on DHCP snooping? (Choose two)
Which three options are areas of router security? (Choose three)
Which technology requires that SSH and AAA are configured before it can work?