Which are ways to combat social based attacks? (Choose two)

What is defined as a collection of networks, reachable by specific interfaces on the router?

Which of the following actions belong to the Disposition phase of the secure network life cycle? (Choose two)

Which three options are areas of router security? (Choose three)

Which statements about routing update authentication are true? (Choose two)

What are requirements when integrating Cisco ISE and Active Directory? (Choose two)

Which recommendations follow defense-in-depth principles? (Choose two)

Which of the following describes the Script kiddies as a category of individuals who attack computer systems and operations?

Which of the following describes the Phreakers as a category of individuals who attack computer systems and operations?

You are reviewing syslog messages from multiple routers in your network. You have noticed irregularities with multiple syslog message timestamps for each router. Which technology can you configure to resolve this?

You need to ensure that CDP is only enabled on interfaces that are connected to a trusted network. CDP must be disabled on all other interfaces. What should you do?

You have noticed several workstations have been configured with an incorrect default gateway. Which type of attack is likely occurring?

You need to implement port security on an access switch. Each switch port must be able to dynamically learn the MAC addresses of the connected devices. If an unauthorized device is detected on an interface, that interface should be placed into an err-disabled state. Which commands should you enter? (Choose two)

Which of the following examples of security controls matches the Physical category of security controls? (Choose two)

What are the steps associated with the Containment, eradication, and recovery incident response phase? (Choose three)

Which Cisco Borderless Networks Security Architecture specifically protects end devices from malware?

In an attempt to lower the number of malware outbreaks, a company creates an e-mail filter that blocks all e-mail with attachments. Which strategy are they attempting to use?

Which statements describe in-band management? (Choose two)

Attacks may take a variety of forms. Which of the following describes the Phishing, pharming, and identify theft?

Why would an organization choose to implement a stateful packet inspection?

Which of the following describes the Hacktivists as a category of individuals who attack computer systems and operations?

Which ESA listener would need to be configured to accept mail from a POP/IMAP system?

Which IDS sensor action will send an ARC response to completely block the attacker's IP address?

Which of the following methods describes Man-in-the-middle attack? (Choose two)

Which traffic properties can be configured to bypass content scanning? (Choose two)

A company opens a new mid-sized branch office. Which Cisco ESA models would ideally be deployed to this office? (Choose three)

Which NAT solution uses ACLs to perform address translation?

Which option is the term for a weakness in a system or its design that can be exploited by a threat?

Which actions can you take on a router to secure NTP in your network? (Choose two)

Threats to network security have become more sophisticated over the years. Identify the next generation threats facing organizations today. (Choose four)

Which statement is true regarding zone based firewalls in which traffic passes between zones?

Which statement about IPS deployments is true?

Which tasks could you perform by deploying a third party MDM solution with Cisco ISE? (Choose two)

Which statements describe the functions of the Security Audit feature? (Choose four)

Select the statements that define the unique components of Cisco Configuration Professional used for security policy deployment. (Choose three)

How is called the total amount of time the system owner will accept for a business process outage?

Which options are examples of data loss prevention solutions? (Choose two)

Which option is a key principle of the Cisco Self-Defending Network strategy?

Cisco SecureX is an access control strategy that allows for more effective, higher-level policy creation and enforcement for mobile users. Which of the following describes the Cisco TrustSec function component?

Which technologies can perform RADIUS and TACACS+ authentication? (Choose two)

Which actions belong to the operations and maintenance phase of the secure network life cycle? (Choose two)

What are reasons that prevent the use of SEAL? (Choose two)

Which statement is true when configuring access control lists (ACLs) on a Cisco router?

Which option is true of using cryptographic hashes?

Which statement is true about application layer firewalls?

Which features can you enable to mitigate STP attacks? (Choose two)

Which of the following describes the function of Cisco ISR?

A private contractor for the military is archiving medical records. Which classification level should be applied to these?

Attacks may take a variety of forms. Which of the following describes the Blended threats as a threat category?

Cisco SecureX is an access control strategy that allows for more effective, higher-level policy creation and enforcement for mobile users. Which of the following describes the Cisco AnyConnect Client component?

Cisco SecureX is an access control strategy that allows for more effective, higher-level policy creation and enforcement for mobile users. Which of the following describes the Cisco SIO component?

Which three of these options are some of the best practices when you implement an effective firewall security policy? (Choose three)

Which option correctly defines asymmetric encryption?

Which of the options are primary reasons for an attacker to perform an IP spoofing attack? (Choose two)

Which types of attacks can be mitigated by implementing port security? (Choose two)