Question: 1 An engineer is using the policy trace tool to troubleshoot a WSA. Which behavior is used?

Transcription

1 Volume: 418 Questions Question: 1 An engineer is using the policy trace tool to troubleshoot a WSA. Which behavior is used? A. External DLP policies are evaluated by tool B. Socks policies are evaluated by tool C. Web proxy Answer: C Question: 2 Which three access control actions permit traffic to pass through the device when using Cisco FirePOWER? (Choose three.) A. pass B. trust C. monitor D. allow E. permit F. inspect,c,d Question: 3 Which are two requirements for configuration a routed interface in a firepower SD840 sensor? A. Virtual router B. An interface C. IP address

2 D. 10 G E. 1 G,C Question: 4 When creating an SSL policy on Cisco FirePOWER, which three options do you have? A. do not decrypt B. trust C. allow D. block with reset E. block F. encrypt Answer: A,D,E Question: 5 A customer's mobile clients now require content scanning, yet there is not an ASA on the network. Which deployment method is required for the Cisco AnyConnect Web Security Module? A. standalone component B. enterprise connection enforcement C. roaming umbrella component D. APEX enforcement Answer: A Question: 6 For which domains will the Cisco Security Appliance allow up to 5000 recipients per message?

3 A. violet. public B. violet. public and blue. public C. violet. Public, blue. Public and green.public D. red. public E. orange. public F. red. public and orange. public Question: 7 When attempting to tunnel FTP traffic through a stateful firewall that may be performing NAT or PAT, which type of VPN tunneling should be used to allow the VPN traffic through the stateful

4 firewall? A. clientless SSL VPN B. IPsec over TCP C. Smart Tunnel D. SSL VPN plug-ins Question: 8 With Cisco ASA active/standby failover, what is needed to enable subsecond failover? A. Use redundant interfaces. B. Enable the stateful failover interface between the primary and secondary Cisco ASA. C. Decrease the default unit failover polltime to 300 msec and the unit failover holdtime to 900 msec. D. Decrease the default number of monitored interfaces to 1 Answer: C Question: 9 An engineer is configuring a Cisco Security Appliance (ESA) and chooses "Preferred" as the settings for TLS on a HAT Mail Flow Policy. Which result occurs? A. TLS is allowed for outgoing connections to MTAs. Connection to the listener require encrypted Simple Mail Transfer Protocol conversations B. TLS is allowed for incoming connections to the listener from MTAs, even after a STARTTLS command received C. TLS is allowed for incoming connections to the listener from MTAs. Until a STARTTLS command received, the ESA responds with an error message to every command other than No Option, EHLO, or QUIT. D. TLS is allowed for outgoing connections to the listener from MTAs. Until a STARTTLS

5 command received, the ESA responds with an error message to every command other than No Option (NOOP), EHLO, or QUIT. Answer: D Question: 10 Which two options are application layer preprocessors? (Choose two) A. HTTP Inspect preprocessor B. SIP preprocessor C. ICMP preprocessor D. Modbus preprocessor E. DNP3 preprocessor Answer: A,B Question: 11 When using Cisco AMP for Networks, which feature copies a file to the Cisco AMP cloud for analysis? A. Spero analysis B. dynamic analysis C. sandbox analysis D. malware analysis Question: 12 Which option describes device trajectory on Cisco Advanced Malware protection for Endpoints? A. It show which devices on the network receive the file. B. it shows a full packet capture of the file.