A client e-mails their broker telling them to invest $100,000 in a new startup company. The company performs poorly and the client loses the bulk of the money. They take the broker to court, stating they did not issue the purchase order. What could the broker have done to protect themselves?

During which attack phase would an attacker use a provision such as registry edits to keep the malware on the system?

Suppose you want to change the minimum password length using the CLI from Cisco Configuration Professional. What should you do first?

Which features can you enable to mitigate STP attacks? (Choose two)

Which of the following describes the function of Cisco ScanSafe?

To verify the clientless SSL VPN, a compliant browser has been opened. Which prefix is the path changed to if the object requires authentication?

A private contractor for the military is archiving medical records. Which classification level should be applied to these?

How is called the most time that a system resource can remain unavailable before there is an unacceptable effect?

You are planning a security policy for your network. Using the least amount of administrative effort, what should be included to help limit traffic from inside the network to outside of it?

Which option is the term for the likelihood that a particular threat using a specific attack will exploit a particular vulnerability of a system that results in an undesirable consequence?

Which statements about routing update authentication are true? (Choose two)

Which hash algorithm is vulnerable to collision attacks?

Select the statements that represent threats to network infrastructure. (Choose four)

RADIUS and TACACS+ are both commonly used to control network access. Which of the following describes the function of RADIUS? (Choose three)

What is the first step you should take when considering securing your network?

Recently a bookmark was created but was misconfigured. The bookmark should allow access to a shared folder located on the Intranet. Which protocol would need to be configured to allow this type of connection?

Which one of the following statements describes the Botnets?

Attacks may take a variety of forms. Which of the following describes the Man-in-the-middle attack?

Which traffic properties can be configured to bypass content scanning? (Choose two)

Which statements accurately describe characteristics of the Cisco borderless networks architecture? (Choose two)

Which of the following examples of security controls matches the Administrative category of security controls? (Choose two)

Which STP attack mitigation features causes an interface to be placed in an errdisabled state if a BPDU is received on that port?

Which of the following describes the function of Cisco ISR?

In what ways can ACLs protect the data plane? (Choose five)

Cisco SecureX is an access control strategy that allows for more effective, higher-level policy creation and enforcement for mobile users. Which of the following describes the Context awareness component?

A client needs to telecommute from home to the office, and requires a VPN connection. Only work related traffic should traverse the tunnel, Internet traffic should not. Which technology would allow for this operation?

Which command could you use to determine the number TACACS+ authentication attempts that have recently timed out?

To verify the clientless SSL VPN, a compliant browser has been opened. Which prefix is the path changed to if the object does not require authentication?

What is the purpose of HIPAA information security compliance regulation?

Which command is used to display established IPsec tunnels?

Security threats have evolved over time. Identity the latest generation of security threats. (Choose four)

Which of the following describes the Wireless assessment?

When configuring firewall access rules, there are several things that need to be avoided, such as completeness issues, consistency issues, and compactness issues. Which of the following are two examples of consistency issues? (Choose two)

Select one of the following statements that describes the overt and covert channels.

When configuring high availability on the ASA, what two failover configurations are supported? (Choose two)

Which threats are the most serious?

You need to implement a high availability solution on the ASA. The solution must be able to work with units running in either single or multiple context mode. Which failover configuration should be used?

Which of the following control plane security features extends policing functionality by allowing finer policing granularity?

Which of the following are Symmetric encryption algorithms? (Choose three)

You need to be able to prevent users from entering global configuration mode unless they have the necessary privilege level. Which actions can you take to accomplish this? (Choose two)

Which two statements describe features of the state table? (Choose two)

Which of the following describes the Script kiddies as a category of individuals who attack computer systems and operations?

A transform-set must be created with the name 'test'. It should also support data confidentiality using strong DES encryption. Enter the command that would accomplish this task.

Which statement about IPS deployments is true?

Network security aims to provide which three key services? (Choose three)

RADIUS and TACACS+ are both commonly used to control network access. Which of the following describes the function of TACACS+? (Choose three)

Which statement about role-based CLI access is true?

Select one of the following statements that describes the trust exploitation threats.

A client on your network is seeking advice from you in regards to the type of host-based security for their home network. They state that they have three devices, which share an Internet connection through a single home server. The home server is directly connected to the ISP router. Their main concern is primarily on traffic going through the home server to and from the other three devices. What should you recommend that would require the least amount of administrative overhead and associated set up cost?

An organization requires a system that will meet the following requirements:
- Aggregate data from any compatible network node
- Produce compliance reports

Which system would fulfill these requirements?

Which of the following describes the Internal assessment?

Which of these options is a GUI tool for performing security configurations on Cisco routers?

Which tasks could you perform by deploying a third party MDM solution with Cisco ISE? (Choose two)

Which types of attacks can be mitigated by implementing port security? (Choose two)

Which of the following actions belong to the Disposition phase of the secure network life cycle? (Choose two)