CWNP-Certified Wireless Security Professional (CWSP)2 Set 3

You manage your company's Cisco devices by using Telnet. Your supervisor is concerned about eavesdropping over inband device management and has asked you to recommend a solution that would allow you to disable the Telnet servers on each device. Which of the following are you most likely to recommend as a replacement? (Select the best answer.)

Which of the following commands should you issue when troubleshooting basic IKE peering to determine whether PSKs are present and matching on both peers? (Select the best answer.)

Your company has installed and configured a Sourcefire device. You want to reduce false positives from a trusted source. Which of the following could you do? (Select 2 choices.)

Which of the following is a reason to use the roundrobin assignment feature of dynamic PAT addresses? (Select the best answer.)

You are configuring manual NAT on a Cisco Firepower device. Which of the following best describes the order in which the NAT rules will be processed? (Select the best answer.)

Which of the following is least likely to be considered a form of malware? (Select the best answer.)

Which of the following occurs when an IDS or IPS does not identify malicious traffic that enters the network? (Select the best answer.)

Which of the following lost or stolen device options are available to employees when MDM is integrated with ISE? (Select 3 choices.)

Which of the following private VLAN port types communicate only with promiscuous ports? (Select the best answer.)

On which of the following layers of the hierarchical network design model should you implement PortFast, BPDU guard, and root guard? (Select the best answer.)