Question 1

What is a key feature of Duo?

Accepted Answer

A)  Provides SSL VPN 
B)  Supports pxGrid 
C)  Authenticates user identity for remote access 
D)  Automates policy creation for IT staff 
A)  Provides SSL VPN 
B)  Supports pxGrid 
C)  Authenticates user identity for remote access 
D)  Automates policy creation for IT staff

Question 2

What do Cisco NGFW fully integrated platforms offer that allow other security components to participate to achieve pervasive and consistent enforcement?

Accepted Answer

A)  Telemetry, shared intelligence, and profiling sources 
B)  Context, telemetry and intelligence sources 
C)  Intelligence sources, telemetry, and shared intelligence 
D)  Context, telemetry, and profiling sources 
A)  Telemetry, shared intelligence, and profiling sources 
B)  Context, telemetry and intelligence sources 
C)  Intelligence sources, telemetry, and shared intelligence 
D)  Context, telemetry, and profiling sources

Question 3

Which Cisco NGIPS capability provides control over users, applications, devices, threats, and provides insights to network vulnerabilities?

Accepted Answer

A)  global threat intelligence 
B)  security automation 
C)  advanced threat protection and rapid remediation 
D)  contextual awareness 
A)  global threat intelligence 
B)  security automation 
C)  advanced threat protection and rapid remediation 
D)  contextual awareness

Question 4

What are three main solutions areas for Advanced Threat? (Choose three.)

Accepted Answer

A)  NGFW 
B)  Network Analytics 
C)  Intrusion Analytics 
D)  Threat Analytics 
E)  Malware Protection
F) Threat Defense 
A)  NGFW 
B)  Network Analytics 
C)  Intrusion Analytics 
D)  Threat Analytics 
E)  Malware Protection
F) Threat Defense

Question 5

What are the competing IT and Operation Technology (OT) priorities that make securing IoT difficult?

Accepted Answer

A)  Innovation vs. manufacturing 
B)  Hackers vs. safety 
C)  Malfunctions vs. output 
D)  Security vs. availability 
A)  Innovation vs. manufacturing 
B)  Hackers vs. safety 
C)  Malfunctions vs. output 
D)  Security vs. availability

Question 6

Which two areas require secure access? (Choose two.)

Accepted Answer

A)  Worktable 
B)  Workspace 
C)  Workloads 
D)  Workforce 
E)  Workflow 
A)  Worktable 
B)  Workspace 
C)  Workloads 
D)  Workforce 
E)  Workflow

Question 7

What is used to reduce attack surfaces?

Accepted Answer

A)  Device trust 
B)  Remediation 
C)  Segmentation 
D)  Access 
A)  Device trust 
B)  Remediation 
C)  Segmentation 
D)  Access

Question 8

What are two key capabilities of Meraki? (Choose two.)

Accepted Answer

A)  identity-based and device-aware security 
B)  application visibility and control 
C)  device profiling 
D)  contextual awareness 
E)  security automation 
A)  identity-based and device-aware security 
B)  application visibility and control 
C)  device profiling 
D)  contextual awareness 
E)  security automation

Question 9

What are three major features of StealthWatch? (Choose three.)

Accepted Answer

A)  Real-time sandboxing 
B)  Forensic investigation 
C)  Threat-based anomaly detection 
D)  Data Loss Prevention 
E)  Netflow monitoring
F) Malware clustering 
A)  Real-time sandboxing 
B)  Forensic investigation 
C)  Threat-based anomaly detection 
D)  Data Loss Prevention 
E)  Netflow monitoring
F) Malware clustering

Question 10

What are two capabilities of Cisco's NGFW Identity Based Policy Control feature? (Choose two.)

Accepted Answer

A)  access to multiple data layers 
B)  threats stopped from getting in and spreading 
C)  see and share malware details 
D)  access to Trojan downloader 
A)  access to multiple data layers 
B)  threats stopped from getting in and spreading 
C)  see and share malware details 
D)  access to Trojan downloader

Question 11

What percent of threats did ASA with FilePOWER block that earned AMP the highest security effectiveness scores in third-party testing?

Accepted Answer

A)  98.5% 
B)  95.6% 
C)  99.2% 
D)  100% 
A)  98.5% 
B)  95.6% 
C)  99.2% 
D)  100%

Question 12

Which two IoT environment layers are protected by AMP for Endpoints? (Choose two.)

Accepted Answer

A)  Control Layer 
B)  Internet/Cloud 
C)  Data Center 
D)  Things 
E)  Access Points 
A)  Control Layer 
B)  Internet/Cloud 
C)  Data Center 
D)  Things 
E)  Access Points

Question 13

What is a key feature of Application Visibility and Control?

Accepted Answer

A)  Retrospective security 
B)  Control of protocol-hopping apps that evade traditional firewalls 
C)  Scalable policy inheritance 
D)  Automated remediation APIs 
A)  Retrospective security 
B)  Control of protocol-hopping apps that evade traditional firewalls 
C)  Scalable policy inheritance 
D)  Automated remediation APIs

Question 14

What are three key benefits of Cisco NGFW? (Choose three.)

Accepted Answer

A)  Reduces throughput 
B)  Increases traffic latency 
C)  Detects and remediates threats faster 
D)  Identifies anomalous traffic 
E)  Prepares defenses
F) Reduces complexity 
A)  Reduces throughput 
B)  Increases traffic latency 
C)  Detects and remediates threats faster 
D)  Identifies anomalous traffic 
E)  Prepares defenses
F) Reduces complexity

Question 15

What are two features of Advanced Malware Protection (AMP)? (Choose two.)

Accepted Answer

A)  File Retrospection and Trajectory 
B)  Dynamic Malware Analysis 
C)  Local Threat Intelligence 
D)  Automated Policy Management 
E)  Automatic Behavioral Authorization 
A)  File Retrospection and Trajectory 
B)  Dynamic Malware Analysis 
C)  Local Threat Intelligence 
D)  Automated Policy Management 
E)  Automatic Behavioral Authorization

Question 16

How does AMP's file reputation feature help customers?

Accepted Answer

A)  It enables secure web browsing with cognitive threat analytics 
B)  It enables point in time detection through a one-to-one engine 
C)  It increases the accuracy of threat detection with Big Data analytics 
D)  It increases the protection to systems with exact fingerprinting 
A)  It enables secure web browsing with cognitive threat analytics 
B)  It enables point in time detection through a one-to-one engine 
C)  It increases the accuracy of threat detection with Big Data analytics 
D)  It increases the protection to systems with exact fingerprinting

Question 17

Which two attack vectors are protected by Malware Protection? (Choose two.)

Accepted Answer

A)  Voicemail 
B)  Web 
C)  Mobile 
D)  Email 
E)  Data Center 
A)  Voicemail 
B)  Web 
C)  Mobile 
D)  Email 
E)  Data Center

Question 18

What are two solutions for Cisco Cloud Security? (Choose two.)

Accepted Answer

A)  cloud data security 
B)  intrusion prevention 
C)  advanced network security 
D)  cloud-delivered security 
E)  cloud security 
A)  cloud data security 
B)  intrusion prevention 
C)  advanced network security 
D)  cloud-delivered security 
E)  cloud security

Question 19

What are two common seller obstacles? (Choose two.)

Accepted Answer

A)  Seller competition 
B)  Overcrowded portfolios 
C)  Fragmented solutions 
D)  Unresponsive potential customers 
E)  Complexity of solution components 
A)  Seller competition 
B)  Overcrowded portfolios 
C)  Fragmented solutions 
D)  Unresponsive potential customers 
E)  Complexity of solution components

Question 20

What are two reasons why perimeter-based network security is no longer sufficient? (Choose two.)

Accepted Answer

A)  More users 
B)  More devices 
C)  More networks 
D)  More IT professionals 
E)  More vulnerabilities 
A)  More users 
B)  More devices 
C)  More networks 
D)  More IT professionals 
E)  More vulnerabilities

Exam 50: Cisco Security Architecture for System Engineers

What is a key feature of Duo?

What do Cisco NGFW fully integrated platforms offer that allow other security components to participate to achieve pervasive and consistent enforcement?

Which Cisco NGIPS capability provides control over users, applications, devices, threats, and provides insights to network vulnerabilities?

What are three main solutions areas for Advanced Threat? (Choose three.)

What are the competing IT and Operation Technology (OT) priorities that make securing IoT difficult?

Which two areas require secure access? (Choose two.)

What is used to reduce attack surfaces?

What are two key capabilities of Meraki? (Choose two.)

What are three major features of StealthWatch? (Choose three.)

What are two capabilities of Cisco's NGFW Identity Based Policy Control feature? (Choose two.)

What percent of threats did ASA with FilePOWER block that earned AMP the highest security effectiveness scores in third-party testing?

Which two IoT environment layers are protected by AMP for Endpoints? (Choose two.)

What is a key feature of Application Visibility and Control?

What are three key benefits of Cisco NGFW? (Choose three.)

What are two features of Advanced Malware Protection (AMP)? (Choose two.)

How does AMP's file reputation feature help customers?

Which two attack vectors are protected by Malware Protection? (Choose two.)

What are two solutions for Cisco Cloud Security? (Choose two.)

What are two common seller obstacles? (Choose two.)

What are two reasons why perimeter-based network security is no longer sufficient? (Choose two.)

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Cisco Certified Network Associate (CCNA)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Implementing Cisco SD-WAN Solutions (ENSDWI)

Designing Cisco Enterprise Networks (ENSLD)

Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Configuring Cisco MDS 9000 Series Switches (DCSAN)

Implementing Cisco Application Centric Infrastructure - Advanced

Automating Cisco Data Center Solutions (DCAUTO)

Securing Networks with Cisco Firepower (300-710 SNCF)

Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Securing Email with Cisco Email Security Appliance (300-720 SESA)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing and Operating Cisco Security Core Technologies

Implementing Cisco Collaboration Core Technologies (CLCOR)

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

CCDE Design Written

Deploying Cisco Unified Contact Center Express

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Designing Cisco Unified Contact Center Enterprise (UCCED)

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters