- All Exams Instant Download
Which four task items need to be performed for an effective risk assessment and to evaluate network posture? (Choose four)
Which four task items need to be performed for an effective risk assessment and to evaluate network posture? (Choose four)A . profilingB . validationC . escalationD . discoveryE . notificationF . scanningG . baseliningH . mitigationView AnswerAnswer: ABDF
Which of the following is true regarding failover link when ASAs are configured in the failover mode?
Which of the following is true regarding failover link when ASAs are configured in the failover mode?A . The information sent over the failover link can only be in clear text.B . Failover key is not required for the secure communication over the failover linkC . The information sent over...
Q52.Which statement about Nmap scanning on the Cisco Firepower System is true?
Q52.Which statement about Nmap scanning on the Cisco Firepower System is true?A . It can scan IP addresses, address blocks, and address ranges on IPv4 and IPv6 networksB . It can leverage multiple proxy devices to increase scan speedC . It performs host discovery before each scan to identify hosts...
Which two statements about the SeND protocol are true? (Choose two)
Which two statements about the SeND protocol are true? (Choose two)A . It counters neighbor discovery threats.B . It must be enabled before you can configure IPv6 addresses.C . It supports numerous custom neighbor discovery messages.D . it logs IPv6-related threats to an external log server.E . It supports an...
What would be the possible cause of this failure?
Refer to the exhibit. One of the Windows machines in your network is experiencing a Dot1x authentication failure. Windows machines are setup to acquire an IP address from DHCP server configured on the switch, which is supposed to handover IP address from 50.1.1.0/24 network, and forward AAA requests to the...
Which statement about the prrid connection agent is true?
Which statement about the prrid connection agent is true?A . It leverages Cisco ISE control functions to manage connections and share information between partner platforms.B . It supports an agentless solution for Cisco ISD . It manages the sharing of contextual information between partner platforms.E . It can fetch user...
Which two commands can be used as an initial step to troubleshoot the situation and determine where the issue might be?
Q65.An organization is deploying FTD in the Data Center. Production tests are performed after the appliances have been connected; however, ping tests to resources behind the firewall are failing. The firewall has two interfaces, INSIDE and OUTSIDE. The problem might be in either direction. The failed testing scenario is from...
Which option is a possible cause?
Q63.You have configured a site-to-site tunnel using static NAT with IKEv2. On one of the routers, you continuously see the IKE session establish and then get torn down with a message that indicates a policy mismatch. Which option is a possible cause?A . One router has its tunnel configured in...
In which two ways can you ensure that all DNS clients (endpoints) use this service for external requests only?
Q73. As an enterprise, you have decided to use Cisco Umbrella (OpenDNS) services for all public. DNS requests. In which two ways can you ensure that all DNS clients (endpoints) use this service for external requests only? (Choose two)A . Install the Umbrella proxy server on all the supported operating...
What is the effect of the given service policy configuration?
Refer to the exhibit. What is the effect of the given service policy configuration?A . It blocks all domains except facebook.com, msn.com, cisco.com, and google.comB . It blocks all domains except cisco.com, msn.com, and facebook.comC . It blocks all facebook.com, msn.com cisco.com, and google.com, permits all other domainsD . It...
