Cisco Automating Cisco Security Solutions SAUTO Set 1

1.

You issue the show ntp associations detail command on Router2 and receive the following output:
Router2#show ntp associations detail
10.0.12.1 configured, authenticated, our_master, sane, valid, stratum 3
ref ID 127.127.1.1, time BF6C06E0.55040FD5 (09:02:04.717 UTC Thu Jul 25 2013)
Which of the following is true? (Select the best answer.)

Router2 has successfully authenticated the NTP clients connected to Router2. NTP on Router2 is synchronized with a master on another device.

885CB989129A5F974833949052CFB2F2 NTP on Router2 is synchronized with itself. Router2 has been configured with an NTP stratum level of 3.

2.

Which of the following is most likely to indicate that the configured main mode ISAKMP policy does not match the policy proposed by the remote peer? (Select the best answer.)

AG_NO_STATE MM_NO_STATE AG_AUTH MM_KEY_AUTH QM_IDLE

3.

Which of the following commands will configure a static pointtopoint VTI tunnel to use 128bit encryption? (Select the best answer.)

crypto ipsec transform-set set1 esp-aes esp-sha-hmac crypto ipsec transform-set set1 esp-des esp-sha-hmac crypto ipsec transform-set set1 esp-3des esp-sha-hmac crypto ipsec transform-set set1 esp-seal esp-sha-hmac crypto ipsec transform-set set1 esp-null esp-sha-hmac
885CB989129A5F974833949052CFB2F2

4.

Which of the following is least likely to be a function of a Cisco ESA? (Select the best answer.)

protecting against phishing protecting against spam protecting against a DDoS attacks protecting against malicious files

5.

You upload a file named isitbad.zip to AMP for analysis. While reviewing the AMP logs, you receive the following output:
Wed Feb 17 12:41:05 2015 Info: File reputation query initiating. File Name =
'isitbad.zip', MID = 852, File Size = 174401 bytes, File Type = application/zipWed
Feb 17 12:41:10 2015 Info: Response received for file reputation query from Cloud.
File Name = 'isitbad.zip', MID = 852, Disposition = unscannable,
Malware = None, Reputation Score = 0, sha256 =
78d80f8fb0e6eaa2988d11607ec6a00840147f8188f6db8b7d00d907440d7aaa, upload_action = 1
Which of the following is true? (Select the best answer.)

The file was uploaded to the cloud and determined to be clean. The file was not uploaded to the cloud, and its disposition is unknown. The file was uploaded to the cloud, but its disposition is unknown. The file was uploaded to the cloud and was determined to be malware. The file was not uploaded to the cloud but was determined to be clean.

6.

You are troubleshooting IPSec VPN connectivity between two sites. From the local router, you are able to ping the remote tunnel endpoint.
Which of the following steps should you perform next? (Select the best answer.)

Issue the traceroute command to trace the route to the tunnel endpoint. Verify that the IKE policies match on both peers. Verify that the peers successfully authenticate each other. Reboot both devices.

7.

Which of the following features are supported on a Cisco ASA operating in multiple context mode? (Select 2 choices.)

RIP active/active failover active/standby failover QoS multicast routing

8.

Which of the following statements is true regarding OWASP? (Select the best answer.)

It is exclusively a North American nonprofit organization. It endorses products from HP and Symantec. It releases security materials under FLOSS licenses. It requires membership to download security tools such as ZAP.

9.

Which of the following best describes a MAC spoofing attack? (Select the best answer.)

using GARP messages to associate an attacker's MAC address with the IP address of a valid host on the network sending forged frames with the intention of overwhelming a switch's CAM table replacing the IP address of a legitimate website with the IP address of a malicious website using the MAC address of another host on the network in order to bypass port security measures

10.

You issue the show zone security command on a Cisco router and receive the following command output:
RouterA#show zone security
zone self
Description: System defined zone
zone inside
Member Interfaces:
FastEthernet0/0
FastEthernet0/1
zone outside
Member Interfaces:
Serial0/0/0
zone dmz
Member Interfaces:
Serial0/0/1
Based on the command output, to which zones can the S0/1/0 interface send traffic? (Select the best answer.)

S0/1/0 can send traffic to the dmz zone. S0/1/0 can send traffic to the outside zone. S0/1/0 can send traffic to the inside zone, but only in response to traffic initiated from the inside zone. S0/1/0 can send traffic to any zone. S0/1/0 cannot send traffic to any configured zones.

Cisco Automating Cisco Security Solutions SAUTO Set 1

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

Cisco Automating Cisco Security Solutions SAUTO Set 1

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner