- All Exams Instant Download
Which statement about IOS zone-based firewalls is true?
Which statement about IOS zone-based firewalls is true?A . An unassigned interface can communicate with assigned interfacesB . Only one interface can be assigned to a zone.C . An interface can be assigned to multiple zones.D . An interface can be assigned only to one zone.View AnswerAnswer: D
Which capability is exclusive to a Cisco AMP public cloud instance as compared to a private cloud instance?
Which capability is exclusive to a Cisco AMP public cloud instance as compared to a private cloud instance?A . RBACB . ETHOS detection engineC . SPERO detection engineD . TETRA detection engineView AnswerAnswer: B
organization?
What are two reasons for implementing a multifactor authentication solution such as Duo Security provide to an organization? (Choose two)A . flexibility of different methods of 2FA such as phone callbacks, SMS passcodes, and push notificationsB . single sign-on access to on-premises and cloud applicationsC . integration with 802.1x security...
What Cisco command shows you the status of an 802.1X connection on interface gi0/1?
What Cisco command shows you the status of an 802.1X connection on interface gi0/1?A . show authorization statusB . show authen sess int gi0/1C . show connection status gi0/1D . show ver gi0/1View AnswerAnswer: B
Which two deployment model configurations are supported for Cisco FTDv in AWS? (Choose two)
Which two deployment model configurations are supported for Cisco FTDv in AWS? (Choose two)A . Cisco FTDv configured in routed mode and managed by an FMCv installed in AWSB . Cisco FTDv with one management interface and two traffic interfaces configuredC . Cisco FTDv configured in routed mode and managed...
Which action controls the amount of URI text that is stored in Cisco WSA logs files?
Which action controls the amount of URI text that is stored in Cisco WSA logs files?A . Configure the datasecurityconfig commandB . Configure the advancedproxyconfig command with the HTTPS subcommandC . Configure a small log-entry size.D . Configure a maximum packet size.View AnswerAnswer: B
Which two probes are configured to gather attributes of connected endpoints using Cisco Identity Services Engine? (Choose two)
Which two probes are configured to gather attributes of connected endpoints using Cisco Identity Services Engine? (Choose two)A . RADIUSB . TACACS+C . DHCPD . sFlowE . SMTPView AnswerAnswer: A,C
What is a commonality between DMVPN and FlexVPN technologies?
What is a commonality between DMVPN and FlexVPN technologies?A . FlexVPN and DMVPN use IS-IS routing protocol to communicate with spokesB . FlexVPN and DMVPN use the new key management protocolC . FlexVPN and DMVPN use the same hashing algorithmsD . IOS routers run the same NHRP code for DMVPN...
Which Cisco command enables authentication, authorization, and accounting globally so that CoA is supported on the device?
Which Cisco command enables authentication, authorization, and accounting globally so that CoA is supported on the device?A . aaa server radius dynamic-authorB . aaa new-modelC . auth-type allD . ip device-trackingView AnswerAnswer: D
What is the admin5 user able to do on HQ_Router after this configuration?
Refer to the exhibit. A network administrator configures command authorization for the admin5 user . What is the admin5 user able to do on HQ_Router after this configuration?A . set the IP address of an interfaceB . complete no configurationsC . complete all configurationsD . add subinterfacesView AnswerAnswer: B Explanation:...
