Question 1

Which two deployment model configurations are supported for Cisco FTDv in AWS? (Choose two.)

Accepted Answer

A)   Cisco FTDv configured in routed mode and managed by an FMCv installed in AWS
B)   Cisco FTDv with one management interface and two traffic interfaces configured
C)   Cisco FTDv configured in routed mode and managed by a physical FMC appliance on premises
D)   Cisco FTDv with two management interfaces and one traffic interface configured
E)   Cisco FTDv configured in routed mode and IPv6 configuredF) A) and D)
G) A) and C)

Question 2

What is the function of the Context Directory Agent?

Accepted Answer

A)   reads the AD logs to map IP addresses to usernames
B)   relays user authentication requests from Cisco WSA to AD
C)   maintains users' group memberships
D)   accepts user authentication requests on behalf of Cisco WSA for user identificationE) A) and B)
F) C) and D)

Question 3

What does the Cloudlock Apps Firewall do to mitigate security concerns from an application perspective?

Accepted Answer

A)   It allows the administrator to quarantine malicious files so that the application can function, just not maliciously.
B)   It discovers and controls cloud apps that are connected to a company's corporate environment.
C)   It deletes any application that does not belong in the network.
D)   It sends the application information to an administrator to act on.E) A) and B)
F) All of the above

Question 4

Which type of attack is social engineering?

Accepted Answer

A)   trojan
B)   MITM
C)   phishing
D)   malwareE) A) and D)
F) All of the above

Question 5

What is the difference between Cross-site Scripting and SQL Injection attacks?

Accepted Answer

A)   Cross-site Scripting is when executives in a corporation are attacked, whereas SQL Injection is when a database is manipulated.
B)   Cross-site Scripting is an attack where code is executed from the server side, whereas SQL Injection is an attack where code is executed from the client side.
C)   Cross-site Scripting is a brute force attack targeting remote sites, whereas SQL Injection is a social engineering attack.
D)   Cross-site Scripting is an attack where code is injected into a database, whereas SQL Injection is an attack where code is injected into a browser.E) B) and D)
F) B) and C)

Question 6

Which two features of Cisco DNA Center are used in a Software Defined Network solution? (Choose two.)

Accepted Answer

A)   accounting
B)   assurance
C)   automation
D)   authentication
E)   encryptionF) B) and E)
G) B) and D)

Question 7

The Cisco ASA must support TLS proxy for encrypted Cisco Unified Communications traffic. Where must the ASA be added on the Cisco UC Manager platform?

Accepted Answer

A)   Certificate Trust List
B)   Endpoint Trust List
C)   Enterprise Proxy Service
D)   Secured Collaboration ProxyE) C) and D)
F) B) and C)

Question 8

An organization is receiving SPAM emails from a known malicious domain. What must be configured in order to prevent the session during the initial TCP communication?

Accepted Answer

A)   Configure the Cisco ESA to reset the TCP connection.
B)   Configure policies to stop and reject communication.
C)   Configure the Cisco ESA to drop the malicious emails.
D)   Configure policies to quarantine malicious emails.E) A) and B)
F) A) and C)

Question 9

An organization received a large amount of SPAM messages over a short time period. In order to take action on the messages, it must be determined how harmful the messages are and this needs to happen dynamically. What must be configured to accomplish this?

Accepted Answer

A)   Configure the Cisco WSA to modify policies based on the traffic seen.
B)   Configure the Cisco ESA to modify policies based on the traffic seen.
C)   Configure the Cisco WSA to receive real-time updates from Cisco Talos.
D)   Configure the Cisco ESA to receive real-time updates from Cisco Talos.E) B) and C)
F) C) and D)

Question 10

A company is experiencing exfiltration of credit card numbers that are not being stored on-premise. The company needs to be able to protect sensitive data throughout the full environment. Which tool should be used to accomplish this goal?

Accepted Answer

A)   Cisco ISE
B)   Web Security Appliance
C)   Security Manager
D)   CloudlockE) B) and C)
F) A) and B)

Question 11

What is an attribute of the DevSecOps process?

Accepted Answer

A)   security scanning and theoretical vulnerabilities
B)   development security
C)   isolated security team
D)   mandated security controls and check listsE) C) and D)
F) B) and D)

Question 12

What are two differences between a Cisco WSA that is running in transparent mode and one running in explicit mode? (Choose two.)

Accepted Answer

A)   The Cisco WSA responds with its own IP address only if it is running in explicit mode.
B)   The Cisco WSA is configured in a web browser only if it is running in transparent mode.
C)   The Cisco WSA responds with its own IP address only if it is running in transparent mode.
D)   The Cisco WSA uses a Layer 3 device to redirect traffic only if it is running in transparent mode.
E)   When the Cisco WSA is running in transparent mode, it uses the WSA's own IP address as the HTTP request destination.F) B) and D)
G) A) and D)

Question 13

How many interfaces per bridge group does an ASA bridge group deployment support?

Accepted Answer

A)   up to 16
B)   up to 2
C)   up to 4
D)   up to 8E) B) and D)
F) All of the above

Question 14

What is a benefit of using Cisco FMC over Cisco ASDM?

Accepted Answer

A)   Cisco FMC uses Java while Cisco ASDM uses HTML5.
B)   Cisco FMC provides centralized management while Cisco ASDM does not.
C)   Cisco FMC supports pushing configurations to devices while Cisco ASDM does not.
D)   Cisco FMC supports all firewall products whereas Cisco ASDM only supports Cisco ASA devices.E) None of the above
F) All of the above

Question 15

Which product allows Cisco FMC to push security intelligence observable to its sensors from other products?

Accepted Answer

A)   Threat Intelligence Director
B)   Encrypted Traffic Analytics.
C)   Cognitive Threat Analytics.
D)   Cisco Talos IntelligenceE) A) and B)
F) A) and C)

Question 16

Which Cisco command enables authentication, authorization, and accounting globally so that CoA is supported on the device?

Accepted Answer

A)   aaa server radius dynamic-author
B)   auth-type all
C)   aaa new-model
D)   ip device-trackingE) A) and B)
F) A) and C)

Question 17

Which telemetry data captures variations seen within the flow, such as the packets TTL, IP/TCP flags, and payload length?

Accepted Answer

A)   flow insight variation
B)   software package variation
C)   interpacket variation
D)   process details variationE) B) and C)
F) All of the above

Question 18

Which information is required when adding a device to Firepower Management Center?

Accepted Answer

A)   username and password
B)   encryption method
C)   device serial number
D)   registration keyE) B) and D)
F) C) and D)

Question 19

Refer to the exhibit. What does the API do when connected to a Cisco security appliance?

Accepted Answer

A)   create an SNMP pull mechanism for managing AMP
B)   gather network telemetry information from AMP for endpoints
C)   get the process and PID information from the computers in the network
D)   gather the network interface information about the computers AMP seesE) A) and B)
F) A) and C)

Question 20

What is a characteristic of Cisco ASA NetFlow v9 Secure Event Logging?

Accepted Answer

A)   It tracks flow-create, flow-teardown, and flow-denied events.
B)   It provides stateless IP flow tracking that exports all records of a specific flow.
C)   It tracks the flow continuously and provides updates every 10 seconds.
D)   Its events match all traffic classes in parallel.E) A) and C)
F) All of the above

Exam 41: Implementing Cisco Collaboration Core Technologies (CLCOR)

An organization is receiving SPAM emails from a known malicious domain. What must be configured in order to prevent the session during the initial TCP communication?

Correct AnswerverifiedShow Answer

Which Cisco command enables authentication, authorization, and accounting globally so that CoA is supported on the device?

Correct AnswerverifiedShow Answer

An organization received a large amount of SPAM messages over a short time period. In order to take action on the messages, it must be determined how harmful the messages are and this needs to happen dynamically. What must be configured to accomplish this?

Correct AnswerverifiedShow Answer

Which telemetry data captures variations seen within the flow, such as the packets TTL, IP/TCP flags, and payload length?

Correct AnswerverifiedShow Answer

What is the function of the Context Directory Agent?

Correct AnswerverifiedShow Answer

What does the Cloudlock Apps Firewall do to mitigate security concerns from an application perspective?

Correct AnswerverifiedShow Answer

A company is experiencing exfiltration of credit card numbers that are not being stored on-premise. The company needs to be able to protect sensitive data throughout the full environment. Which tool should be used to accomplish this goal?

Correct AnswerverifiedShow Answer

Refer to the exhibit. What does the API do when connected to a Cisco security appliance?

Correct AnswerverifiedShow Answer

Which two deployment model configurations are supported for Cisco FTDv in AWS? (Choose two.)

Correct AnswerverifiedShow Answer

How many interfaces per bridge group does an ASA bridge group deployment support?

Correct AnswerverifiedShow Answer

Which information is required when adding a device to Firepower Management Center?

Correct AnswerverifiedShow Answer

What is a benefit of using Cisco FMC over Cisco ASDM?

Correct AnswerverifiedShow Answer

Which product allows Cisco FMC to push security intelligence observable to its sensors from other products?

Correct AnswerverifiedShow Answer

What is a characteristic of Cisco ASA NetFlow v9 Secure Event Logging?

Correct AnswerverifiedShow Answer

The Cisco ASA must support TLS proxy for encrypted Cisco Unified Communications traffic. Where must the ASA be added on the Cisco UC Manager platform?

Correct AnswerverifiedShow Answer

Which two features of Cisco DNA Center are used in a Software Defined Network solution? (Choose two.)

Correct AnswerverifiedShow Answer

What are two differences between a Cisco WSA that is running in transparent mode and one running in explicit mode? (Choose two.)

Correct AnswerverifiedShow Answer

What is the difference between Cross-site Scripting and SQL Injection attacks?

Correct AnswerverifiedShow Answer

What is an attribute of the DevSecOps process?

Correct AnswerverifiedShow Answer

Which type of attack is social engineering?

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified