Which of the following should you enable to help protect a network from man-in-the-middle attacks? A. STP B. DAI C. PVLAN D. port security Explanation: Of the available choices, you should enable Dynamic ARP Inspection (DAI) to help protect a network from man-in-the-middle attacks. DAI enhances security by intercepting, logging, and discarding Address Resolution Protocol […]

Which of the following REST API request methods can be used to create an object on a Cisco ASA? A. POST B. PUT C. GET D. PATCH E. DELETE Explanation: POST is a Representational State Transfer (REST) Application Programming Interface (API) request method that can be used to create an object on a Cisco Adaptive […]

A Microsoft Windows endpoint is attempting to authenticate to the network. During a posture assessment, Cisco ISE detects that the Automatic Updates feature has not been enabled on the endpoint. The endpoint is otherwise compliant. Which of the following statements about the endpoint is true? A. It will be labeled noncompliant, and administrators will be […]

In which of the following deployment modes is traffic passed from an ASA to its FirePOWER module, processed, and then returned to the ASA? A. inline mode B. passive monitor-only mode C. inline tap monitor-only mode D. routed mode Explanation: Traffic passed from a Cisco Adaptive Security Appliance (ASA) to its FirePOWER module, processed, and […]

Which of the following types of attacks is often a result of programmer error within a C++ application? A. a ping of death attack B. a buffer overflow attack C. an ARP poisoning attack D. a DDoS attack Explanation: A buffer overflow attack is often a result of programmer error within a C++ application. Although […]

Which of the following Cisco platforms support AsyncOS APIs? (Choose three.) A. WSA B. Nexus C. ESA D. IOS XR E. IOS XE F. SMA Explanation: The Cisco Email Security Appliance (ESA), the Cisco Web Security Appliance (WSA), and the Cisco Content Security Management Appliance (SMA) all support AsyncOS Application Programming Interfaces (APIs). APIs allow […]

Which of the following traffic types can be detected by the FirePOWER rate-based prevention preprocessor engine? A. distributed port-scan traffic B. Back Orifice traffic C. SYN flood traffic D. port-sweep traffic Explanation: The FirePOWER rate-based prevention preprocessor engine can detect SYN flood traffic. A FirePOWER intrusion prevention system (IPS) has several predefined preprocessor engines that […]

Which of the following is a Transport and Network layer preprocessor that is available in Cisco Firepower NGIPS? A. inline normalization B. SIP C. DNS D. Modbus E. SSH Explanation: The inline normalization preprocessor is a Transport and Network layer preprocessor that is available in Cisco Firepower Next-Generation Intrusion Prevention System (NGIPS). Firepower NGIPS has […]

Which of the following statements about Cisco AMP is true? A. It relies on the LINA engine and the Snort engine to detect threats. B. It is based on IETF standards and allows security products to communicate. C. It enables other technologies to use its services through connectors. D. It evolved from OpenDNS and blocks […]

Which of the following functions can you perform with the advancedproxyconfig command on a Cisco WSA? (Choose two.) A. set the maximum HTTP header size or URL size for proxy requests B. set a minimum upload request body size for external DLP servers C. take a snapshot of the proxy D. allow or block content-encoding […]