NEW QUESTION 1
Which three functions can Cisco Application Visibility and Control perform within Cisco Cloud Web Security? (Choose three.)

• A. validation of malicious traffic
• B. traffic control
• C. extending Web Security to all computing devices
• D. application-level classification
• E. monitoring
• F. signature tuning

Answer: BDE

NEW QUESTION 2
Which cloud-based malware detection engine uses machine-learning detection techniques in the Cisco Advanced Malware Protection cloud?

• A. third-party detections
• B. Spero
• C. Ethos
• D. Memcache

Answer: B

NEW QUESTION 3
What information will be displayed when issuing the whoami command?

• A. Username only
• B. Username and Groups
• C. Username, Fullname and Groups
• D. Username, Groups, and Location

Answer: D

NEW QUESTION 4
Which type of interface is needed to pass untagged VLAN traffic from one network to another on a Cisco FirePOWER Appliance 8130?

• A. hybrid
• B. physical
• C. logical routed
• D. logical switched

Answer: B

NEW QUESTION 5
When the WSA policy trace tool is used to make a request to the proxy, where is the request logged?

• A. proxy logs
• B. access logs
• C. authentication logs
• D. The request is not logged

Answer: B

NEW QUESTION 6
What three alert notification options are available in Cisco IntelliShield Alert Manager? (Choose three.)

• A. Alert Summary as Text
• B. Complete Alert as an HTML Attachment
• C. Complete Alert as HTML
• D. Complete Alert as RSS
• E. Alert Summary as Plain Text
• F. Alert Summary as MMS

Answer: ABC

NEW QUESTION 7
Which CLI command is used to register a Cisco FirePOWER sensor to Firepower Management Center?

• A. configure system add <host><key>
• B. configure manager <key> add host
• C. configure manager delete
• D. configure manger add <host><key>

Answer: A

Explanation: http://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide
/fpmc-config-guide-v60/fpmc-config-guide-v60_appendix_01011110.html#ID-2201-00000005

NEW QUESTION 8
Which Cisco technology combats viruses and malware with virus outbreak filters that are downloaded from Cisco SenderBase?

• A. ASA
• B. WSA
• C. Secure mobile access
• D. IronPort ESA
• E. SBA

Answer: D

NEW QUESTION 9
Which Cisco ESA predefined sender group uses parameter-matching to reject senders?

• A. WHITELIST
• B. BLACKLIST
• C. UNKNOWNLIST
• D. SUSPECTLIST

Answer: B

NEW QUESTION 10
A web security appliance is inspecting inbound traffic. In which sequence is inbound https traffic inspected?

• A. Routing Policy > Decryption Policy > Access Policy
• B. Access Policy > Decryption Policy > Routing Policy
• C. Routing Policy > Access Policy > Decryption Policy
• D. Decryption Policy > Access Policy > Routing Policy
• E. Decryption Policy > Routing Policy > Access Policy
• F. Access Policy > Routing Policy > Decryption Policy

Answer: B

NEW QUESTION 11
An engineer must architect an AMP private cloud deployment. What is the benefit of running in air-gaped mode?

• A. Internet connection is not required for disposition.
• B. Database sync time is reduced.
• C. Disposition queries are done on AMP appliances.
• D. A dedicated server is needed to run amp-sync.

Answer: D

NEW QUESTION 12
User wants to deploy your managed device in Layer 3 routed mode and must configure a virtual router and a routed interface. Which managed shows this configuration?

• A. Cisco FirePOWER services on a Cisco ASA 5500x.
• B. virtual NGIPS
• C. Cisco FirePOWER module on a Cisco ASA 5585x.
• D. Cisco FirePOWER appliance.

Answer: C

NEW QUESTION 13
An engineer must deploy AMP with cloud protection. Which machine learning engine uses active heuristics?

• A. Spero
• B. IOCs
• C. 1to1
• D. Ethos

Answer: A

NEW QUESTION 14
Which two are valid suppression types on a Cisco Next Generation Intrusion Prevention System?

• A. Port
• B. Rule
• C. Source
• D. Application
• E. Protocol

Answer: BC

NEW QUESTION 15
You ran the ssh generate-key command on the Cisco IPS and now administrators are unable to connect. Which action can be taken to correct the problem?

• A. Replace the old key with a new key on the client.
• B. Run the ssh host-key command.
• C. Add the administrator IP addresses to the trusted TLS host list on the IPS.
• D. Run the ssh authorized-keys command.

Answer: A

NEW QUESTION 16
Which three sender reputation ranges identify the default behavior of the Cisco Email Security Appliance? (Choose three.)

• A. If it is between -1 and +10, the email is accepted
• B. If it is between +1 and +10, the email is accepted
• C. If it is between -3 and -1, the email is accepted and additional emails from the sender are throttled
• D. If it is between -3 and +1, the email is accepted and additional emails from the sender are throttled
• E. If it is between -4 and +1, the email is accepted and additional emails from the sender are throttled
• F. If it is between -10 and -3, the email is blocked
• G. If it is between -10 and -3, the email is sent to the virus and spam engines for additional scanning
• H. If it is between -10 and -4, the email is blocked

Answer: ACF

NEW QUESTION 17
Which feature does Acceptable Use Controls use to implement Cisco AVC?

• A. ISA
• B. Cisco Web Usage Controls
• C. Cisco WSA
• D. Cisco ESA

Answer: B

NEW QUESTION 18
An engineer wants to cluster an existing ESA physical appliance with an ESA virtual appliance. Which statement is true?

• A. This action is possible as long as the devices are running the identical AsyncOS
• B. This action is not possible for virtual appliances
• C. This action is possible between different models and OS
• D. This action is not possible because the devices are not identical models

Answer: A

NEW QUESTION 19
What Software can be installed on the Cisco 4100 series appliance?

• A. FTD
• B. ASA
• C. ASAv
• D. FMC

Answer: A