Which of the following is a QoS feature that can apply policies to individual controlplane subinterfaces? (Select
the best answer.)

What is the minimum DH modulus size recommended by Cisco to provide acceptable security when DH must
be used instead of an NGE algorithm? (Select the best answer.)

Which of the following is true regarding loop guard? (Select the best answer.)

Which of the following statements are true regarding a ZFW? (Select 2 choices.)

Which of the following attacks involves overwhelming a switch’s CAM table? (Select the best answer.)

Which of the following is an open framework used to guide an organization in making software security
decisions that are in alignment with the organization’s risk profile? (Select the best answer.)

Which of the following commands can be used to determine the SPI that a router will use to reach an active
IPSec peer? (Select the best answer.)

Which of the following statements is true regarding security contexts on a new Cisco ASA in multiple context
mode? (Select the best answer.)

Your corporate network uses MobileIron as an MDM for ISE. You have been informed that a user has lost his
phone and that you must perform a selective wipe on the device.
Which of the following will not be removed from the device during the selective wipe? (Select the best answer.)

You are using ASDM to verify a VPN configuration made by another administrator on an ASA. Please click
exhibit to examine the network configuration.A user accesses the VPN by typing https://203.0.113.1/default in a browser’s location bar.
Which of the following is true? (Select the best answer.)
Exhibit: