1.
Which of the following can you mitigate by implementing DAI? (Select the best answer.)
2.
You have configured a lawful intercept view, five CLI views, and two superviews on a Cisco router. How many additional CLI views can you create? (Select the best answer.)
3.
Which of the following statements is true regarding the aaa new-modelcommand? (Select the best answer.)
4.
Which of the following signature microengines typically has the greatest effect on Cisco IOS IPS performance? (Select the best answer.)
5.
You have configured the password management feature for a tunnel group on an ASA. The ASA is using a Cisco Secure ACS RADIUS server for AAA authentication. Which of the following actions will occur after a remote user with an expired password attempts to establish a VPN connection? (Select the best answer.)
6.
You manage your company's Cisco devices by using Telnet. Your supervisor is concerned about eavesdropping over inband device management and has asked you to recommend a solution that would allow you to disable the Telnet servers on each device. Which of the following are you most likely to recommend as a replacement? (Select the best answer.)
7.
Which of the following commands should you issue when troubleshooting basic IKE peering to determine whether PSKs are present and matching on both peers? (Select the best answer.)
8.
Your company has installed and configured a Sourcefire device. You want to reduce false positives from a trusted source. Which of the following could you do? (Select 2 choices.)
9.
Which of the following is a reason to use the roundrobin assignment feature of dynamic PAT addresses? (Select the best answer.)
10.
You are configuring manual NAT on a Cisco Firepower device. Which of the following best describes the order in which the NAT rules will be processed? (Select the best answer.)