NEW QUESTION 1
Refer to the Following. Which option describe the result of this configuration on a Cisco ASA firewall?
asafwl (config) #http server enable asafw1(config)#http 10.10.10.1 255.255.255.255 inside

• A. The firewall allows command-line access from 10.10.10.1
• B. The firewall allows ASDM access from a client on 10.10.10.1
• C. The management IP address of the firewall is 10.10.10.1
• D. The inside interface IP address of the firewall is 10.10.10.1

Answer: B

NEW QUESTION 2
With Cisco ASA active/standby failover, what is needed to enable subsecond failover?

• A. Use redundant interfaces.
• B. Enable the stateful failover interface between the primary and secondary Cisco ASA.
• C. Decrease the default unit failover polltime to 300 msec and the unit failover holdtime to 900 msec.
• D. Decrease the default number of monitored interfaces to 1

Answer: C

NEW QUESTION 3
Which three user roles are partially defined by default in Prime Security Manager? (Choose three.)

• A. networkoperator
• B. admin
• C. helpdesk
• D. securityoperator
• E. monitoringadmin
• F. systemadmin

Answer: BCF

NEW QUESTION 4
which two tasks can the network discovery feature perform? (choose two)

• A. host discovery
• B. Block traffic
• C. user discovery
• D. reset connection
• E. route traffic

Answer: AC

NEW QUESTION 5
Drag and drop the terms on the left onto the correct definition for the promiscuous IPS risk rating calculation on the right.

Answer:

Explanation: Reference:
http://www.cisco.com/c/en/us/products/collateral/security/ips-4200-seriessensors/prod_white_paper0
900aecd806e7299.html

NEW QUESTION 6
How does a user access a Cisco Web Security Appliance for initial setup?

• A. Connect the console cable and use the terminal at 9600 baud to run the setup wizard.
• B. Connect the console cable and use the terminal at 115200 baud to run the setup wizard.
• C. Open the web browser at 192.168.42.42:8443 for the setup wizard over https.
• D. Open the web browser at 192.168.42.42:443 for the setup wizard over https.

Answer: C

NEW QUESTION 7

Answer:

Explanation: First, enable the Gig 0/0 and Gig 0/1 interfaces:

Second, create the pair under the “interface pairs” taB.

Then, apply the HIGHRISK action rule to the newly created interface pair:

Then apply the same for the MEDIUMRISK traffic (deny attacker inline)

Finally. Log the packets for the LOWRICK event:

When done it should look like this:

NEW QUESTION 8
What information will be displayed when issuing the whoami command?

• A. Username only
• B. Username and Groups
• C. Username, Fullname and Groups
• D. Username, Groups, and Location

Answer: D

NEW QUESTION 9
Which Cisco Web Security Appliance deployment mode requires minimal change to endpoint devices?

• A. Transparent Mode
• B. Explicit Forward Mode
• C. Promiscuous Mode
• D. Inline Mode

Answer: A

NEW QUESTION 10
What command alters the SSL ciphers used by the Cisco Email Security Appliance for TLS sessions and HTTPS access?

• A. sslconfig
• B. sslciphers
• C. tlsconifg
• D. certconfig

Answer: A

NEW QUESTION 11
User wants to deploy your managed device in Layer 3 routed mode and must configure a virtual router and a routed interface. Which managed shows this configuration?

• A. Cisco FirePOWER services on a Cisco ASA 5500x.
• B. virtual NGIPS
• C. Cisco FirePOWER module on a Cisco ASA 5585x.
• D. Cisco FirePOWER appliance.

Answer: C

NEW QUESTION 12
If inline-TCP-evasion-protection-mode on a Cisco IPS is set to asymmetric mode, what is a side effect?

• A. Packet flow is normal.
• B. TCP requests are throttled.
• C. Embryonic connections are ignored.
• D. Evasion may become possible.

Answer: D

NEW QUESTION 13
When learning accept mode is set to auto, and the action is set to rotate, when is the KB created and used?

• A. It is created every 24 hours and used for 24 hours.
• B. It is created every 24 hours, but the current KB is used.
• C. It is created every 1 hour and used for 24 hours.
• D. A KB is created only in manual mode.

Answer: A

NEW QUESTION 14
Which two benefits are provided by the dynamic dashboard in Cisco ASDM Version 5.2? (Choose two.)

• A. It configures system polices for NAC devices.
• B. It forwards traffic to destination devices.
• C. It provides statistics for device health.
• D. It replaces syslog, RADIUS, and TACACS+ servers.
• E. It automatically detects Cisco security appliances to configure.

Answer: CE

NEW QUESTION 15
Which statement about the default configuration of an IPS sensor's management security settings is true?

• A. There is no login banner
• B. The web server port is TCP 80
• C. Telnet and SSH are enable
• D. User accounts lock after three attempts

Answer: A

NEW QUESTION 16
An engineer is configuring cisco ESA with a multilayer approach to fight virus and malware. Which two features can be used to fulfill that task?

• A. Outbreak filters
• B. White list
• C. RAT
• D. DLP
• E. Sophos engine

Answer: AE

NEW QUESTION 17
Refer to the following.
Router (config) #username admin secret cisco Router (config) #no service password-encryption
How is the “cisco” password stored?

• A. As MD5 hash
• B. As Type 0
• C. As Type 7
• D. As Clear Text

Answer: A

NEW QUESTION 18
Which two types of digital certificate enrollment processes are available for the Cisco ASA security appliance? (Choose two.)

• A. LDAP
• B. FTP
• C. TFTP
• D. HTTP
• E. SCEP
• F. Manual

Answer: EF