NEW QUESTION 1
What is the default CX Management 0/0 IP address on a Cisco ASA 5512-X appliance?

• A. 192.168.1.1
• B. 192.168.1.2
• C. 192.168.1.3
• D. 192.168.1.4
• E. 192.168.1.5
• F. 192.168.8.8

Answer: F

NEW QUESTION 2
Which piece of information is required to perform a policy trace for the Cisco WSA?

• A. the URL to trace
• B. the source IP address of the trace
• C. authentication credentials to make the request
• D. the destination IP address of the trace

Answer: A

NEW QUESTION 3
Which Cisco AMP file disposition valid?

• A. pristine
• B. malware
• C. dirty
• D. nonmalicios

Answer: B

Explanation: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Refere

NEW QUESTION 4
Which piece of information is required to perform a policy trace for the Cisco WSA?

• A. the destination IP address of the trace
• B. the source IP address of the trace
• C. the URL to trace
• D. authentication credentials to make the request

Answer: C

NEW QUESTION 5
Which statement regarding hashing is correct?

• A. MD5 produces a 64-bit message digest
• B. SHA-1 produces a 160-bit message digest
• C. MD5 takes more CPU cycles to compute than SHA-1.
• D. Changing 1 bit of the input to SHA-1 can change up to 5 bits in the output.

Answer: B

NEW QUESTION 6
Which description of an advantage of utilizing IPS virtual sensors is true?

• A. Different configurations can be applied to different sets of traffic.
• B. The persistent store is unlimited for the IPS virtual sensor.
• C. The virtual sensor does not require 802.1q headers for inbound traffic.
• D. Asymmetric traffic can be split between multiple virtual sensors

Answer: A

Explanation: http://www.cisco.com/c/en/us/td/docs/security/ips/7-0/configuration/guide/cli/cliguide7/cli_virtual_sensors.pdf

NEW QUESTION 7
On which platforms can you run CWS connector? (Choose two)

• A. Cisco ASA Firewall
• B. Cisco IPS module
• C. Standalone deployment
• D. Cisco ISR router
• E. Cisco Firepower NGIPS

Answer: AD

NEW QUESTION 8
An engineer is troubleshooting authentication settings on a WSA. Which command accomplishes this action?

• A. testauthconfig
• B. testconfgauth
• C. verifyconfigauth
• D. verifyauth

Answer: A

NEW QUESTION 9
The Web Security Appliance has identities defined for faculty and staff, students, and default access. The faculty and staff identity identifies users based on the source network and authenticated credentials. The identity for students identifies users based on the source network along with successful authentication credentials. The global identity is for guest users not authenticated against the domain.
Recently, a change was made to the organization's security policy to allow faculty and staff access to a social network website, and the security group changed the access policy for faculty and staff to allow the social networking category.
Which are the two most likely reasons that the category is still being blocked for a faculty and staff user? (Choose two.)

• A. The user is being matched against the student policy because the user did not enter credentials.
• B. The user is using an unsupported browser so the credentials are not working.
• C. The social networking URL was entered into a custom URL category that is blocked in the access policy.
• D. The user is connected to the wrong network and is being blocked by the student policy.
• E. The social networking category is being allowed but the AVC policy is still blocking the website.

Answer: CE

NEW QUESTION 10
What is a value that Cisco ESA can use for tracing mail flow?

• A. the source IP address
• B. the FQDN of the destination IP address
• C. the destination IP address
• D. the FQDN of the source IP address

Answer: D

NEW QUESTION 11
Which two statements about Cisco Firepower file and intrusion inspection under control policies are true? (Choose two.)

• A. File inspection occurs before intrusion prevention.
• B. Intrusion Inspection occurs after traffic is blocked by file type.
• C. File and intrusion drop the same packet.
• D. Blocking by file type takes precedence over malware inspection and blocking
• E. File inspection occurs after file discovery

Answer: AE

NEW QUESTION 12
Which option is a benefit of Cisco hybrid email security?

• A. on-premises control of outbound data
• B. advanced malware protection
• C. email encryption
• D. message tracking

Answer: A

NEW QUESTION 13
You have configured a VLAN pair that is connected to a switch that is unable to pass traffic. If the IPS is configured correctly, which additional configuration must you perform to enable the switch to pass traffic?

• A. Configure access ports on the switch.
• B. Configure the trunk port on the switch.
• C. Enable IP routing on the switch.
• D. Enable ARP inspection on the switch.

Answer: A

NEW QUESTION 14
What are the two policy types that can use a web reputation profile to perform reputation-based processing? (Choose two.)

• A. profile policies
• B. encryption policies
• C. decryption policies
• D. access policies

Answer: CD

NEW QUESTION 15
Which IPS feature allows you to aggregate multiple IPS links over a single port channel?

• A. UDLD
• B. ECLB
• C. LACP
• D. PAgP

Answer: B

NEW QUESTION 16
When learning accept mode is set to auto, and the action is set to rotate, when is the KB created and used?

• A. It is created every 24 hours and used for 24 hours.
• B. It is created every 24 hours, but the current KB is used.
• C. It is created every 1 hour and used for 24 hours.
• D. A KB is created only in manual mode.

Answer: A

NEW QUESTION 17
Which Cisco technology prevents targeted malware attacks, provides data loss prevention and spam protection, and encrypts email?

• A. SBA
• B. secure mobile access
• C. IPv6 DMZ web service
• D. ESA

Answer: D

NEW QUESTION 18
Which platform has message tracking enabled by default?

• A. C670
• B. C370
• C. Virtual ESA
• D. It is not enabled by default on any platform.

Answer: D

NEW QUESTION 19
Which standby protocol which works on NGIPS but not on CWS?

• A. HSRP
• B. GLBP
• C. SFRP
• D. VRRP

Answer: C