Which stage of the anomaly detection process is traffic compared to a knowledge base?

What is a benefit of the Promiscuous deployment mode?

Which range in the Cisco Web Reputation Filter does aggressive syndication and user tracking fall into?

How many Active Directory Servers can be included in the NTLM Authentication?

Which statements about the Cisco ASA Next-Generation Firewall policy structure are true? (Choose three)

Which three statements about the Cisco AVC engine are true? (Choose three)

Which policy is used to determine how to treat HTTPS traffic?

What functionality does the Cisco AVC engine provide?

Which of these is a feature of Cloud Web Security Connector mode?

Which SMTP feature delivers messages on behalf of users?

Which Cisco IPS component provides zero-day protection?

Which three tactics does the Outbreak Filter use to protect clients? (Choose three)

Which ESA deployment option uses a firewall DMZ for inbound traffic?

Which threat profile system would be suitable for utility companies?

Which Cisco ESA service refers to the quarantine of suspicious emails?

Which two types of information would a signature-based network IPS detect? (Choose two)

What CLI command Is used to block redirected traffic from Cisco ASA to Cisco ASA CX if the Cisco ASA CX fails and also configures the authentication proxy port?

Which network intrusion prevention approach uses network behavior analysis?

Which is not an area that the Cisco IPS would typically be located within a typical modularized network?

Which is a feature of the CISCO PRSM Event Viewer?

Which is not a step in configuring Cisco ASA to download Cisco AnyConnect Web Security Module to the client machine?

Which is a feature of reputation filters?

Which two alert notifications are available in Cisco Security IntelliShield Alert Manager? (Choose two)

Which is not a function of the deobfuscation feature?

Which is a feature of the Transparent Proxy Mode?

Which two statements regarding a web site with a web reputation score of minus three are true? (Choose two)

Identify the scanning engines used by the Dynamic Vectoring and Streaming Engine (DVS). (Choose three)

Which is not the right configuration for connecting WCCP to ASA?

Which is a signature tuning method that reduces false positives?

Which statements about the Cisco Application Visibility Control are true? (Choose three)

Which step is not shared between specifying and not specifying the signature engine in the Custom Signature Wizard?

Which listener configuration deals with undelivered email messages?

What step should be performed during the first phase of URL categorizing process?

Which is not a feature of the PAC files?

Which authentication type is supported by LDAP?

Which tab in the Cisco IDM configures Alert and Error event details?

What can capture traffic based on various OSI Layer 3 and Layer 4 criteria?

Identify the six primary functions of the Security Control Framework. (Choose six)

Which two statements describe Cisco's Streaming Media Bandwidth Control? (Choose two)

Which file type options can be managed when controlling uploaded content? (Choose three)

Which is not a step in the process of configuring the global correlation inspection?

Which two MIME categories would be used to block the downloading of MP4 based files? (Choose two)

You need to calculate the risk rating for an identified problem. The following information is relevant to this case.

Promiscuous Delta: 15
Sensorbase rating: 30
Attack relevancy: Unknown
Potential Damage: Low (50)
Target asset value: Low (75)
Signature accuracy: 75

What is the risk rating?

Which two actions would you perform to throttle the total bandwidth that can be used by streaming media for all users on the network? (Choose two)

Which is the first step in the interaction between the identity, decryption, and access policies?

What does the Test domain join link verify?

Which Cisco ESA solution specifically incorporates a third-party scan into the process of determining if a message should be filtered as spam?

Which scenario indicates an attack?

Which two statements regarding Cisco ESA spam quarantine are true? (Choose two)

Which anomaly detection zone are non-allocated addresses placed in?

Which two configurable actions can take place on positively identified spam? (Choose two)

Which statements about Cisco Adaptive Security Appliances (ASA) are true? (Choose two)

What is a feature of the Cloud Web Security Connector mode?

Which feature best describes realm configuration?

What are the two types of bandwidth limits controlled by the Cisco Application and Control (AVC)? (Choose two)