Cisco Automating Cisco Security Solutions SAUTO Set 4

1.

Which of the following security functions is associated with the data plane? (Select 2 choices.)

device configuration protection signaling protection traffic conditioning traffic filtering

2.

Which of following capabilities do an IDS and IPS have in common? (Select the best answer.)

blocking a particular connection blocking traffic from a particular host modifying traffic resetting TCP connections

3.

Which of the following statements are true regarding RADIUS? (Select 2 choices.)

It encrypts only the password in AccessRequest packets. It combines authorization and authentication functions. It provides more flexible security options than TACACS+. It uses TCP port 49. It is a Ciscoproprietary standard protocol.

4.

Which of the following protocols can IPSec use to provide the confidentiality component of the CIA triad? (Select 2 choices.)

AES AH DES MD5 SHA

5.

You issue the following commands on a Cisco ASA with no other configured interfaces:
asa(config)#interface gigabitethernet 0/1
asa(configif)#speed 1000
asa(configif)#duplex full
asa(configif)#nameif inside
asa(configif)#ip address 10.1.1.1 255.255.255.0
asa(configif)#no shutdown
asa(configif)#exit

asa(config)#telnet 10.1.1.0 255.255.255.0 inside
asa(config)#telnet timeout 30
Which of the following statements is true regarding the resulting configuration? (Select the best answer.)

Telnet sessions will time out after 30 seconds of inactivity. The ASA will assign the interface a security level of 0. The ASA will assign the interface a security level of 100. Telnet sessions will be denied until a security level is manually assigned.

6.

Which of the following statements is true regarding the primary bootset when the Cisco IOS Resilient Configuration feature is enabled? (Select the best answer.)

The configuration file can be secured on a TFTP server, but the system image must be secured on local storage.

The system image can be secured on a TFTP server, but the configuration file must be secured on local storage. The configuration file and the system image must both be secured on local storage. The configuration file and the system image must both be secured on remote storage.

7.

Which of the following can be installed on a host to ensure that only specified inbound and outbound connections are permitted? (Select the best answer.)

antivirus software a HIPS a personal firewall a proxy server

8.

Which of the following statements are true regarding the FirePOWER inline normalization preprocessor engine? (Select 2 choices.)

Inline normalization can process IPv4 and ICMPv4 traffic but not IPv6 traffic. Inline normalization can process IPv4 and IPv6 traffic but not ICMPv4 traffic. Inline normalization cannot detect TCP SYN flood attacks. Inline normalization cannot detect TCP session hijacking attacks. Inline normalization takes place immediately before decoding by the packet decoder.

9.

Which of the following statements is true regarding a split ACS deployment? (Select the best answer.)

Cisco recommends using a dedicated log collector instead of the primary or secondary server. The split configuration has the drawback of making an administrator less aware of the functional status of each server. The AAA load is divided between the primary and secondary servers, which produces a lessthanoptimal AAA flow. The primary and secondary servers can be used for different, specialized operations such as network admission and device administration.

10.

The following partial command output is from the running configuration of an ASA that has been configured to authorize VPN users based on their group membership in AD:
ldap attributemap ExampleMap mapname memberOf GroupPolicy mapvalue memberOf CN=Managers,CN=Users,OU=bsnsw,DC=boson,DC=com Group5
mapvalue memberOf CN=Marketing,CN=Users,OU=bsnsw,DC=boson,DC=com Group4 mapvalue memberOf
CN=Employees,CN=Users,OU=bsnsw,DC=boson,DC=com Group3 mapvalue memberOf CN=Engineers,CN=Users,OU=bsnsw,DC=boson,DC=com Group2
mapvalue memberOf CN=Finance,CN=Users,OU=bsnsw,DC=boson,DC=com Group1
An LDAP authorization query for a VPN user returns the following values:
memberOf: value = CN=Managers,CN=Users,OU=bsnsw,DC=boson,DC=com
memberOf: value = CN=Marketing,CN=Users,OU=bsnsw,DC=boson,DC=com
memberOf: value = CN=Employees,CN=Users,OU=bsnsw,DC=boson,DC=com
memberOf: value = CN=Finance,CN=Users,OU=bsnsw,DC=boson,DC=com
Which group policy will the ASA assign to the user in this scenario? (Select the best answer.)

Group1 Group2 Group3 Group4 Group5

Cisco Automating Cisco Security Solutions SAUTO Set 4

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

Cisco Automating Cisco Security Solutions SAUTO Set 4

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner