Question 1

Which solution protects hybrid cloud deployment workloads with application visibility and segmentation?

Accepted Answer

A)  Nexus 
B)  Stealthwatch 
C)  Firepower 
D)  Tetration 
A)  Nexus 
B)  Stealthwatch 
C)  Firepower 
D)  Tetration

Question 2

Which deployment model is the most secure when considering risks to cloud adoption?

Accepted Answer

A)  public cloud 
B)  hybrid cloud 
C)  community cloud 
D)  private cloud 
A)  public cloud 
B)  hybrid cloud 
C)  community cloud 
D)  private cloud

Question 3

An organization has two machines hosting web applications. Machine 1 is vulnerable to SQL injection while machine 2 is vulnerable to buffer overflows. What action would allow the attacker to gain access to machine 1 but not machine 2?

Accepted Answer

A)  sniffing the packets between the two hosts 
B)  sending continuous pings 
C)  overflowing the buffer's memory 
D)  inserting malicious commands into the database 
A)  sniffing the packets between the two hosts 
B)  sending continuous pings 
C)  overflowing the buffer's memory 
D)  inserting malicious commands into the database

Question 4

Which benefit does endpoint security provide the overall security posture of an organization?

Accepted Answer

A)  It streamlines the incident response process to automatically perform digital forensics on the endpoint. 
B)  It allows the organization to mitigate web-based attacks as long as the user is active in the domain. 
C)  It allows the organization to detect and respond to threats at the edge of the network. 
D)  It allows the organization to detect and mitigate threats that the perimeter security devices do not detect. 
A)  It streamlines the incident response process to automatically perform digital forensics on the endpoint. 
B)  It allows the organization to mitigate web-based attacks as long as the user is active in the domain. 
C)  It allows the organization to detect and respond to threats at the edge of the network. 
D)  It allows the organization to detect and mitigate threats that the perimeter security devices do not detect.

Question 5

After a recent breach, an organization determined that phishing was used to gain initial access to the network before regaining persistence. The information gained from the phishing attack was a result of users visiting known malicious websites. What must be done in order to prevent this from happening in the future?

Accepted Answer

A)  Modify web proxy settings. 
B)  Modify outbound malware scanning policies. 
C)  Modify identification profiles. 
D)  Modify an access policy. 
A)  Modify web proxy settings. 
B)  Modify outbound malware scanning policies. 
C)  Modify identification profiles. 
D)  Modify an access policy.

Question 6

A network administrator is configuring a rule in an access control policy to block certain URLs and selects the "Chat and Instant Messaging" category. Which reputation score should be selected to accomplish this goal?

Accepted Answer

A)  5 
B)  10 
C)  3 
D)  1 
A)  5 
B)  10 
C)  3 
D)  1

Question 7

An engineer needs behavioral analysis to detect malicious activity on the hosts, and is configuring the organization's public cloud to send telemetry using the cloud provider's mechanisms to a security device. Which mechanism should the engineer configure to accomplish this goal?

Accepted Answer

A)  sFlow 
B)  NetFlow 
C)  mirror port 
D)  VPC flow logs 
A)  sFlow 
B)  NetFlow 
C)  mirror port 
D)  VPC flow logs

Question 8

An engineer has enabled LDAP accept queries on a listener. Malicious actors must be prevented from quickly identifying all valid recipients. What must be done on the Cisco ESA to accomplish this goal?

Accepted Answer

A)  Configure Directory Harvest Attack Prevention 
B)  Bypass LDAP access queries in the recipient access table. 
C)  Use Bounce Verification. 
D)  Configure incoming content filters. 
A)  Configure Directory Harvest Attack Prevention 
B)  Bypass LDAP access queries in the recipient access table. 
C)  Use Bounce Verification. 
D)  Configure incoming content filters.

Question 9

With which components does a southbound API within a software-defined network architecture communicate?

Accepted Answer

A)  applications 
B)  controllers within the network 
C)  appliances 
D)  devices such as routers and switches 
A)  applications 
B)  controllers within the network 
C)  appliances 
D)  devices such as routers and switches

Question 10

What provides visibility and awareness into what is currently occurring on the network?

Accepted Answer

A)  CMX 
B)  WMI 
C)  Cisco Prime Infrastructure 
D)  Telemetry 
A)  CMX 
B)  WMI 
C)  Cisco Prime Infrastructure 
D)  Telemetry

Question 11

Refer to the exhibit. A network administrator configured a site-to-site VPN tunnel between two Cisco IOS routers, and hosts are unable to communicate between two sites of VPN. The network administrator runs the debug crypto isakmp sa command to track VPN status. What is the problem according to this command output?

Accepted Answer

A)  interesting traffic was not applied 
B)  encryption algorithm mismatch 
C)  authentication key mismatch 
D)  hashing algorithm mismatch 
A)  interesting traffic was not applied 
B)  encryption algorithm mismatch 
C)  authentication key mismatch 
D)  hashing algorithm mismatch

Question 12

A Cisco FirePower administrator needs to configure a rule to allow a new application that has never been seen on the network. Which two actions should be selected to allow the traffic to pass without inspection? (Choose two.)

Accepted Answer

A)  permit 
B)  allow 
C)  reset 
D)  trust 
E)  monitor 
A)  permit 
B)  allow 
C)  reset 
D)  trust 
E)  monitor

Question 13

What is a feature of Cisco NetFlow Secure Event Logging for Cisco ASAs?

Accepted Answer

A)  Multiple NetFlow collectors are supported. 
B)  Advanced NetFlow v9 templates and legacy v5 formatting are supported. 
C)  Secure NetFlow connectors are optimized for Cisco Prime Infrastructure 
D)  Flow-create events are delayed. 
A)  Multiple NetFlow collectors are supported. 
B)  Advanced NetFlow v9 templates and legacy v5 formatting are supported. 
C)  Secure NetFlow connectors are optimized for Cisco Prime Infrastructure 
D)  Flow-create events are delayed.

Question 14

An organization has a Cisco Stealthwatch Cloud deployment in their environment. Cloud logging is working as expected, but logs are not being received from the on-premise network. What action will resolve this issue?

Accepted Answer

A)  Deploy a Cisco FTD sensor to send events to Cisco Stealthwatch Cloud. 
B)  Deploy a Cisco Stealthwatch Cloud sensor on the network to send data to Cisco Stealthwatch Cloud. 
C)  Configure security appliances to send syslogs to Cisco Stealthwatch Cloud. 
D)  Configure security appliances to send NetFlow to Cisco Stealthwatch Cloud. 
A)  Deploy a Cisco FTD sensor to send events to Cisco Stealthwatch Cloud. 
B)  Deploy a Cisco Stealthwatch Cloud sensor on the network to send data to Cisco Stealthwatch Cloud. 
C)  Configure security appliances to send syslogs to Cisco Stealthwatch Cloud. 
D)  Configure security appliances to send NetFlow to Cisco Stealthwatch Cloud.

Question 15

What is a required prerequisite to enable malware file scanning for the Secure Internet Gateway?

Accepted Answer

A)  Enable IP Layer enforcement. 
B)  Activate the Advanced Malware Protection license 
C)  Activate SSL decryption. 
D)  Enable Intelligent Proxy. 
A)  Enable IP Layer enforcement. 
B)  Activate the Advanced Malware Protection license 
C)  Activate SSL decryption. 
D)  Enable Intelligent Proxy.

Question 16

A network administrator configures Dynamic ARP Inspection on a switch. After Dynamic ARP Inspection is applied, all users on that switch are unable to communicate with any destination. The network administrator checks the Interface status of all interfaces, and there is no err-disabled interface. What is causing this problem?

Accepted Answer

A)  DHCP snooping has not been enabled on all VLANs 
B)  Dynamic ARP inspection has not been enabled on all VLANs 
C)  The ip arp inspection limit command is applied on all interfaces and is blocking the traffic of all users The ip arp inspection limit command is applied on all interfaces and is blocking the traffic of all users 
D)  The no ip arp inspection trust command is applied on all user host interfaces no ip arp inspection trust command is applied on all user host interfaces 
A)  DHCP snooping has not been enabled on all VLANs 
B)  Dynamic ARP inspection has not been enabled on all VLANs 
C)  The ip arp inspection limit command is applied on all interfaces and is blocking the traffic of all users The ip arp inspection limit command is applied on all interfaces and is blocking the traffic of all users 
D)  The no ip arp inspection trust command is applied on all user host interfaces no ip arp inspection trust command is applied on all user host interfaces

Question 17

Which form of attack is launched using botnets?

Accepted Answer

A)  TCP flood 
B)  DDOS 
C)  DOS 
D)  virus 
A)  TCP flood 
B)  DDOS 
C)  DOS 
D)  virus

Question 18

What must be used to share data between multiple security products?

Accepted Answer

A)  Cisco Platform Exchange Grid 
B)  Cisco Rapid Threat Containment 
C)  Cisco Stealthwatch Cloud 
D)  Cisco Advanced Malware Protection 
A)  Cisco Platform Exchange Grid 
B)  Cisco Rapid Threat Containment 
C)  Cisco Stealthwatch Cloud 
D)  Cisco Advanced Malware Protection

Question 19

Which two endpoint measures are used to minimize the chances of falling victim to phishing and social engineering attacks? (Choose two.)

Accepted Answer

A)  Patch for cross-site scripting. 
B)  Perform backups to the private cloud. 
C)  Protect against input validation and character escapes in the endpoint. 
D)  Install a spam and virus email filter. 
E)  Protect systems with an up-to-date antimalware program. 
A)  Patch for cross-site scripting. 
B)  Perform backups to the private cloud. 
C)  Protect against input validation and character escapes in the endpoint. 
D)  Install a spam and virus email filter. 
E)  Protect systems with an up-to-date antimalware program.

Question 20

What is a characteristic of Firepower NGIPS inline deployment mode?

Accepted Answer

A)  ASA with Firepower module cannot be deployed 
B)  It cannot take actions such as blocking traffic 
C)  It is out-of-band from traffic 
D)  It must have inline interface pairs configured 
A)  ASA with Firepower module cannot be deployed 
B)  It cannot take actions such as blocking traffic 
C)  It is out-of-band from traffic 
D)  It must have inline interface pairs configured

Exam 41: Implementing Cisco Collaboration Core Technologies (CLCOR)

Which solution protects hybrid cloud deployment workloads with application visibility and segmentation?

Which deployment model is the most secure when considering risks to cloud adoption?

An organization has two machines hosting web applications. Machine 1 is vulnerable to SQL injection while machine 2 is vulnerable to buffer overflows. What action would allow the attacker to gain access to machine 1 but not machine 2?

Which benefit does endpoint security provide the overall security posture of an organization?

A network administrator is configuring a rule in an access control policy to block certain URLs and selects the "Chat and Instant Messaging" category. Which reputation score should be selected to accomplish this goal?

An engineer needs behavioral analysis to detect malicious activity on the hosts, and is configuring the organization's public cloud to send telemetry using the cloud provider's mechanisms to a security device. Which mechanism should the engineer configure to accomplish this goal?

An engineer has enabled LDAP accept queries on a listener. Malicious actors must be prevented from quickly identifying all valid recipients. What must be done on the Cisco ESA to accomplish this goal?

With which components does a southbound API within a software-defined network architecture communicate?

What provides visibility and awareness into what is currently occurring on the network?

A Cisco FirePower administrator needs to configure a rule to allow a new application that has never been seen on the network. Which two actions should be selected to allow the traffic to pass without inspection? (Choose two.)

What is a feature of Cisco NetFlow Secure Event Logging for Cisco ASAs?

An organization has a Cisco Stealthwatch Cloud deployment in their environment. Cloud logging is working as expected, but logs are not being received from the on-premise network. What action will resolve this issue?

What is a required prerequisite to enable malware file scanning for the Secure Internet Gateway?

Which form of attack is launched using botnets?

What must be used to share data between multiple security products?

Which two endpoint measures are used to minimize the chances of falling victim to phishing and social engineering attacks? (Choose two.)

What is a characteristic of Firepower NGIPS inline deployment mode?

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Cisco Certified Network Associate (CCNA)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Implementing Cisco SD-WAN Solutions (ENSDWI)

Designing Cisco Enterprise Networks (ENSLD)

Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Configuring Cisco MDS 9000 Series Switches (DCSAN)

Implementing Cisco Application Centric Infrastructure - Advanced

Automating Cisco Data Center Solutions (DCAUTO)

Securing Networks with Cisco Firepower (300-710 SNCF)

Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Securing Email with Cisco Email Security Appliance (300-720 SESA)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing and Operating Cisco Security Core Technologies

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

CCDE Design Written

Deploying Cisco Unified Contact Center Express

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Designing Cisco Unified Contact Center Enterprise (UCCED)

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Cisco Security Architecture for System Engineers

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters