Cisco Implementing Cisco Network Security Set 1

1.

Which of the following commands will configure a static pointtopoint VTI tunnel to use 128bit encryption? (Select the best answer.)

crypto ipsec transform-set set1 esp-aes esp-sha-hmac crypto ipsec transform-set set1 esp-des esp-sha-hmac crypto ipsec transform-set set1 esp-3des esp-sha-hmac crypto ipsec transform-set set1 esp-seal esp-sha-hmac crypto ipsec transform-set set1 esp-null esp-sha-hmac

2.

Which of the following is true of BPDU traffic on a Cisco zonebased firewall in transparent mode? (Select the best answer.)

It is denied by default. It is permitted only in the inbound direction. It is permitted only in the outbound direction. It is permitted in both inbound and outbound directions. It can be controlled by ARP inspection but not by access rules.

3.

You issue the following command on a Cisco device: test aaa group radius user1 b0s0n newcode profile profile1 Which of the following is true? (Select the best answer.)

The command will fail. The command will succeed but report an error. The command will succeed without error. There is not enough information to determine the success or failure of the command.

4.

Which of the following is least likely to be a function of a Cisco ESA? (Select the best answer.)

protecting against phishing protecting against spam protecting against a DDoS attacks protecting against malicious files

5.

You upload a file named isitbad.zip to AMP for analysis. While reviewing the AMP logs, you receive the following output:
Wed Feb 17 12:41:05 2015 Info: File reputation query initiating. File Name =
'isitbad.zip', MID = 852, File Size = 174401 bytes, File Type = application/zipWed
Feb 17 12:41:10 2015 Info: Response received for file reputation query from Cloud.
File Name = 'isitbad.zip', MID = 852, Disposition = unscannable,
Malware = None, Reputation Score = 0, sha256 =
78d80f8fb0e6eaa2988d11607ec6a00840147f8188f6db8b7d00d907440d7aaa, upload_action = 1
Which of the following is true? (Select the best answer.)

The file was uploaded to the cloud and determined to be clean. The file was not uploaded to the cloud, and its disposition is unknown. The file was uploaded to the cloud, but its disposition is unknown. The file was uploaded to the cloud and was determined to be malware. The file was not uploaded to the cloud but was determined to be clean.

6.

You are troubleshooting IPSec VPN connectivity between two sites. From the local router, you are able to ping the remote tunnel endpoint. Which of the following steps should you perform next? (Select the best answer.)

Issue the traceroute command to trace the route to the tunnel endpoint. Verify that the IKE policies match on both peers. Verify that the peers successfully authenticate each other. Reboot both devices.

7.

You have configured a Cisco ESA with a URL Category action that redirects the URLs of adult content sites to the Cisco Cloud Web Security proxy service. You receive a report that users are successfully accessing some adult content sites from the company network. However, you are able to verify that known adult sites are being redirected. Which of the following could be the problem? (Select the best answer.)

You did not specify any text to replace the URL. You did not defang the URL so that it cannot be clicked. The connection to the Cisco Cloud Web Security proxy service timed out. The adult content sites being visited are uncategorized.

8.

An inbound TCP packet arrives at the ingress interface of a Cisco ASA 8.2 firewall. The packet is part of an established session. The packet reaches the interface's internal buffer and the input counter is incremented. Which of the following actions will occur next? (Select the best answer.)

The packet will be processed by interface ACLs. The packet is forwarded to the outbound interface. The packet is subjected to an inspection check. The packet's IP header is translated by NAT/PAT.

9.

Which of the following is not an attribute on which an ISE MDM policy can be based? (Select the best answer.)

the encryption status of the disk the jailbreak status of the operating system the revision of the operating system the status of the PIN lock configuration the status of the Bluetooth interface

10.

Which of the following features are supported on a Cisco ASA operating in multiple context mode? (Select 2 choices.)

RIP active/active failover active/standby failover QoS multicast routing

Cisco Implementing Cisco Network Security Set 1

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

Cisco Implementing Cisco Network Security Set 1

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner