Question 1

Which benefit is provided by ensuring that an endpoint is compliant with a posture policy configured in Cisco ISE?

Accepted Answer

A)  It adds endpoints to identity groups dynamically 
B)  It allows the endpoint to authenticate with 802.1x or MAB 
C)  It allows CoA to be applied if the endpoint status is compliant 
D)  It verifies that the endpoint has the latest Microsoft security patches installed 
A)  It adds endpoints to identity groups dynamically 
B)  It allows the endpoint to authenticate with 802.1x or MAB 
C)  It allows CoA to be applied if the endpoint status is compliant 
D)  It verifies that the endpoint has the latest Microsoft security patches installed A

Question 2

Which feature is supported when deploying Cisco ASAv within AWS public cloud?

Accepted Answer

A)  multiple context mode 
B)  user deployment of Layer 3 networks 
C)  IPv6 
D)  clustering 
A)  multiple context mode 
B)  user deployment of Layer 3 networks 
C)  IPv6 
D)  clustering B

Question 3

Which policy represents a shared set of features or parameters that define the aspects of a managed device that are likely to be similar to other managed devices in a deployment?

Accepted Answer

A)  group policy 
B)  access control policy 
C)  device management policy 
D)  platform service policy 
A)  group policy 
B)  access control policy 
C)  device management policy 
D)  platform service policy D

Question 4

Refer to the exhibit. What does the number 15 represent in this configuration?

Accepted Answer

A)  privilege level for an authorized user to this router 
B)  access list that identifies the SNMP devices that can access the router 
C)  interval in seconds between SNMPv3 authentication attempts 
D)  number of possible failed attempts until the SNMPv3 user is locked out 
A)  privilege level for an authorized user to this router 
B)  access list that identifies the SNMP devices that can access the router 
C)  interval in seconds between SNMPv3 authentication attempts 
D)  number of possible failed attempts until the SNMPv3 user is locked out

Question 5

What is a characteristic of Dynamic ARP Inspection?

Accepted Answer

A)  DAI determines the validity of an ARP packet based on valid IP to MAC address bindings from the DHCP snooping binding database. 
B)  In a typical network, make all ports as trusted except for the ports connecting to switches, which are untrusted. 
C)  DAI associates a trust state with each switch. 
D)  DAI intercepts all ARP requests and responses on trusted ports only. 
A)  DAI determines the validity of an ARP packet based on valid IP to MAC address bindings from the DHCP snooping binding database. 
B)  In a typical network, make all ports as trusted except for the ports connecting to switches, which are untrusted. 
C)  DAI associates a trust state with each switch. 
D)  DAI intercepts all ARP requests and responses on trusted ports only.

Question 6

Which policy is used to capture host information on the Cisco Firepower Next Generation Intrusion Prevention System?

Accepted Answer

A)  correlation 
B)  intrusion 
C)  access control 
D)  network discovery 
A)  correlation 
B)  intrusion 
C)  access control 
D)  network discovery

Question 7

What features does Cisco FTDv provide over Cisco ASAv?

Accepted Answer

A)  Cisco FTDv provides 1GB of firewall throughput while Cisco ASAv does not. 
B)  Cisco FTDv runs on VMware while Cisco ASAv does not. 
C)  Cisco FTDv runs on AWS while Cisco ASAv does not. 
D)  Cisco FTDv supports URL filtering while Cisco ASAv does not. 
A)  Cisco FTDv provides 1GB of firewall throughput while Cisco ASAv does not. 
B)  Cisco FTDv runs on VMware while Cisco ASAv does not. 
C)  Cisco FTDv runs on AWS while Cisco ASAv does not. 
D)  Cisco FTDv supports URL filtering while Cisco ASAv does not.

Question 8

Refer to the exhibit. Traffic is not passing through IPsec site-to-site VPN on the Firepower Threat Defense appliance. What is causing this issue?

Accepted Answer

A)  Site-to-site VPN preshared keys are mismatched. 
B)  Site-to-site VPN peers are using different encryption algorithms. 
C)  No split-tunnel policy is defined on the Firepower Threat Defense appliance. 
D)  The access control policy is not allowing VPN traffic in. 
A)  Site-to-site VPN preshared keys are mismatched. 
B)  Site-to-site VPN peers are using different encryption algorithms. 
C)  No split-tunnel policy is defined on the Firepower Threat Defense appliance. 
D)  The access control policy is not allowing VPN traffic in.

Question 9

Refer to the exhibit. Which command was used to display this output?

Accepted Answer

A)  show dot1x all 
B)  show dot1x 
C)  show dot1x all summary 
D)  show dot1x interface gi1/0/12 
A)  show dot1x all 
B)  show dot1x 
C)  show dot1x all summary 
D)  show dot1x interface gi1/0/12

Question 10

Refer to the exhibit. Which type of authentication is in use?

Accepted Answer

A)  POP3 authentication 
B)  SMTP relay server authentication 
C)  external user and relay mail authentication 
D)  LDAP authentication for Microsoft Outlook 
A)  POP3 authentication 
B)  SMTP relay server authentication 
C)  external user and relay mail authentication 
D)  LDAP authentication for Microsoft Outlook

Question 11

An engineer is configuring a Cisco ESA and wants to control whether to accept or reject email messages to a recipient address. Which list contains the allowed recipient addresses?

Accepted Answer

A)  SAT 
B)  BAT 
C)  HAT 
D)  RAT 
A)  SAT 
B)  BAT 
C)  HAT 
D)  RAT

Question 12

Which risk is created when using an Internet browser to access cloud-based service?

Accepted Answer

A)  misconfiguration of Infra, which allows unauthorized access 
B)  intermittent connection to the cloud connectors 
C)  vulnerabilities within protocol 
D)  insecure implementation of API 
A)  misconfiguration of Infra, which allows unauthorized access 
B)  intermittent connection to the cloud connectors 
C)  vulnerabilities within protocol 
D)  insecure implementation of API

Question 13

An engineer needs a solution for TACACS+ authentication and authorization for device administration. The engineer also wants to enhance wired and wireless network security by requiring users and endpoints to use 802.1X, MAB, or WebAuth. Which product meets all of these requirements?

Accepted Answer

A)  Cisco Prime Infrastructure 
B)  Cisco Identity Services Engine 
C)  Cisco Stealthwatch 
D)  Cisco AMP for Endpoints 
A)  Cisco Prime Infrastructure 
B)  Cisco Identity Services Engine 
C)  Cisco Stealthwatch 
D)  Cisco AMP for Endpoints

Question 14

A network engineer has entered the snmp-server user andy myv3 auth sha cisco priv aes 256 cisc0383320506 command and needs to send SNMP information to a host at 10.255.254.1. Which command achieves this goal?

Accepted Answer

A)  snmp-server host inside 10.255.254.1 snmpv3 andy 
B)  snmp-server host inside 10.255.254.1 version 3 myv3 
C)  snmp-server host inside 10.255.254.1 snmpv3 myv3 
D)  snmp-server host inside 10.255.254.1 version 3 andy 
A)  snmp-server host inside 10.255.254.1 snmpv3 andy 
B)  snmp-server host inside 10.255.254.1 version 3 myv3 
C)  snmp-server host inside 10.255.254.1 snmpv3 myv3 
D)  snmp-server host inside 10.255.254.1 version 3 andy

Question 15

Which VPN technology can support a multivendor environment and secure traffic between sites?

Accepted Answer

A)  SSL VPN 
B)  GET VPN 
C)  FlexVPN 
D)  DMVPN 
A)  SSL VPN 
B)  GET VPN 
C)  FlexVPN 
D)  DMVPN

Question 16

Which PKI enrollment method allows the user to separate authentication and enrollment actions and also provides an option to specify HTTP/TFTP commands to perform file retrieval from the server?

Accepted Answer

A)  terminal 
B)  selfsigned 
C)  url 
D)  profile 
A)  terminal 
B)  selfsigned 
C)  url 
D)  profile

Question 17

Which solution combines Cisco IOS and IOS XE components to enable administrators to recognize applications, collect and send network metrics to Cisco Prime and other third-party management tools, and prioritize application traffic?

Accepted Answer

A)  Cisco Security Intelligence 
B)  Cisco Application Visibility and Control 
C)  Cisco Model Driven Telemetry 
D)  Cisco DNA Center 
A)  Cisco Security Intelligence 
B)  Cisco Application Visibility and Control 
C)  Cisco Model Driven Telemetry 
D)  Cisco DNA Center

Question 18

Which two application layer preprocessors are used by Firepower Next Generation Intrusion Prevention System? (Choose two.)

Accepted Answer

A)  SIP 
B)  inline normalization 
C)  SSL 
D)  packet decoder 
E)  modbus 
A)  SIP 
B)  inline normalization 
C)  SSL 
D)  packet decoder 
E)  modbus

Question 19

Which two descriptions of AES encryption are true? (Choose two.)

Accepted Answer

A)  AES is less secure than 3DES. 
B)  AES is more secure than 3DES. 
C)  AES can use a 168-bit key for encryption. 
D)  AES can use a 256-bit key for encryption. 
E)  AES encrypts and decrypts a key three times in sequence. 
A)  AES is less secure than 3DES. 
B)  AES is more secure than 3DES. 
C)  AES can use a 168-bit key for encryption. 
D)  AES can use a 256-bit key for encryption. 
E)  AES encrypts and decrypts a key three times in sequence.

Question 20

Which feature is configured for managed devices in the device platform settings of the Firepower Management Center?

Accepted Answer

A)  quality of service 
B)  time synchronization 
C)  network address translations 
D)  intrusion policy 
A)  quality of service 
B)  time synchronization 
C)  network address translations 
D)  intrusion policy

Exam 41: Implementing Cisco Collaboration Core Technologies (CLCOR)

Which benefit is provided by ensuring that an endpoint is compliant with a posture policy configured in Cisco ISE?

Which feature is supported when deploying Cisco ASAv within AWS public cloud?

Which policy represents a shared set of features or parameters that define the aspects of a managed device that are likely to be similar to other managed devices in a deployment?

Refer to the exhibit. What does the number 15 represent in this configuration?

What is a characteristic of Dynamic ARP Inspection?

Which policy is used to capture host information on the Cisco Firepower Next Generation Intrusion Prevention System?

What features does Cisco FTDv provide over Cisco ASAv?

Refer to the exhibit. Traffic is not passing through IPsec site-to-site VPN on the Firepower Threat Defense appliance. What is causing this issue?

Refer to the exhibit. Which command was used to display this output?

Refer to the exhibit. Which type of authentication is in use?

An engineer is configuring a Cisco ESA and wants to control whether to accept or reject email messages to a recipient address. Which list contains the allowed recipient addresses?

Which risk is created when using an Internet browser to access cloud-based service?

An engineer needs a solution for TACACS+ authentication and authorization for device administration. The engineer also wants to enhance wired and wireless network security by requiring users and endpoints to use 802.1X, MAB, or WebAuth. Which product meets all of these requirements?

A network engineer has entered the snmp-server user andy myv3 auth sha cisco priv aes 256 cisc0383320506 command and needs to send SNMP information to a host at 10.255.254.1. Which command achieves this goal?

Which VPN technology can support a multivendor environment and secure traffic between sites?

Which PKI enrollment method allows the user to separate authentication and enrollment actions and also provides an option to specify HTTP/TFTP commands to perform file retrieval from the server?

Which solution combines Cisco IOS and IOS XE components to enable administrators to recognize applications, collect and send network metrics to Cisco Prime and other third-party management tools, and prioritize application traffic?

Which two application layer preprocessors are used by Firepower Next Generation Intrusion Prevention System? (Choose two.)

Which two descriptions of AES encryption are true? (Choose two.)

Which feature is configured for managed devices in the device platform settings of the Firepower Management Center?

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Cisco Certified Network Associate (CCNA)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Implementing Cisco SD-WAN Solutions (ENSDWI)

Designing Cisco Enterprise Networks (ENSLD)

Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Configuring Cisco MDS 9000 Series Switches (DCSAN)

Implementing Cisco Application Centric Infrastructure - Advanced

Automating Cisco Data Center Solutions (DCAUTO)

Securing Networks with Cisco Firepower (300-710 SNCF)

Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Securing Email with Cisco Email Security Appliance (300-720 SESA)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing and Operating Cisco Security Core Technologies

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

CCDE Design Written

Deploying Cisco Unified Contact Center Express

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Designing Cisco Unified Contact Center Enterprise (UCCED)

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Cisco Security Architecture for System Engineers

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters