Q1. Which three operating systems are supported with Cisco AMP for Endpoints? (Choose three.)

A. Windows

B. AWS

C. Android

D. Cisco IOS

E. OS X

F. ChromeOS

View Answer

Q2. Which three sender reputation ranges identify the default behavior of the Cisco Email Security Appliance? (Choose three.)

A. If it is between -1 and +10, the email is accepted

B. If it is between +1 and +10, the email is accepted

C. If it is between -3 and -1, the email is accepted and additional emails from the sender are throttled

D. If it is between -3 and +1, the email is accepted and additional emails from the sender are throttled

E. If it is between -4 and +1, the email is accepted and additional emails from the sender are throttled

F. If it is between -10 and -3, the email is blocked

G. If it is between -10 and -3, the email is sent to the virus and spam engines for additional scanning

H. If it is between -10 and -4, the email is blocked

View Answer

Q3. Which Cisco AMP for Endpoints, what, is meant by simple custom detection?

A. It is a rule for identifying a file that should be whitelisted by Cisco AMP.

B. It is a method for identifying and quarantining a specific file by its SHA-256 hash.

C. It is a feature for configuring a personal firewall.

D. It is a method for identifying and quarantining a set of files by regular expression language.

View Answer

Q4. Which three access control actions permit traffic to pass through the device when using Cisco FirePOWER? (Choose three.)

A. pass

B. trust

C. monitor

D. allow

E. permit

F. inspect

View Answer

Q5. Which three access control actions permit traffic to pass through the device when using Cisco FirePOWER? (Choose three.)

A. pass

B. trust

C. monitor

D. allow

E. permit

F. inspect

View Answer

Q6. The Web Cache Communication Protocol (WCCP) is a content-routing protocol that can facilitate the redirection of traffic flows in real time. Your organization has deployed WCCP to redirect web traffic that traverses their Cisco Adaptive Security Appliances (ASAs) to their Cisco Web Security Appliances (WSAs).

The simulator will provide access to the graphical user interfaces of one Cisco ASA and one Cisco WSA that are participating in a WCCP service. Not all aspects of the GUIs are implemented in the simulator. The options that have been implemented are sufficient to determine the best answer to each of the questions that are presented.

Your task is to examine the details available in the simulated graphical user interfaces and select the best answer.

How many Cisco ASAs and how many Cisco WSAs are participating in the WCCP service?

A. One Cisco ASA or two Cisco ASAs configured as an Active/Standby failover pair, and one Cisco WSA.

B. One Cisco ASA or two Cisco ASAs configured as an Active/Active failover pair, and one Cisco WSA.

C. One Cisco ASA or two Cisco ASAs configured as an Active/Standby failover pair, and two Cisco WSAs.

D. One Cisco ASA or two Cisco ASAs configured as an Active/Active failover pair, and two Cisco WSAs.

E. Two Cisco ASAs and one Cisco WSA.

F. Two Cisco ASAs and two Cisco WSAs.

View Answer

Q7. Which type of server is required to communicate with a third-party DLP solution?

A. an ICAP-capable proxy server

B. a PKI certificate server

C. an HTTP server

D. an HTTPS server

View Answer

Q8. The Web Cache Communication Protocol (WCCP) is a content-routing protocol that can facilitate the redirection of traffic flows in real time. Your organization has deployed WCCP to redirect web traffic that traverses their Cisco Adaptive Security Appliances (ASAs) to their Cisco Web Security Appliances (WSAs).

The simulator will provide access to the graphical user interfaces of one Cisco ASA and one Cisco WSA that are participating in a WCCP service. Not all aspects of the GUIs are implemented in the simulator. The options that have been implemented are sufficient to determine the best answer to each of the questions that are presented.

Your task is to examine the details available in the simulated graphical user interfaces and select the best answer.

Between the Cisco ASA configuration and the Cisco WSA configuration, what is true with respect to redirected ports?

A. Both are configured for port 80 only.

B. Both are configured for port 443 only.

C. Both are configured for both port 80 and 443.

D. Both are configured for ports 80, 443 and 3128.

E. There is a configuration mismatch on redirected ports.

View Answer

Q9. Which CLI command is used to generate firewall debug messages on a Cisco FirePOWER sensor?

A. system support ssl-debug

B. system support firewall-engine-debug

C. system support capture-traffic

D. system support platform

View Answer

Q10.  

Refer to the exhibit. Which option is a result of this configuration?

A. All ingress traffic on the inside interface that matches the access list is redirected.

B. All egress traffic on the outside interface that matches the access list is redirected.

C. All TCP traffic that arrives on the inside interface is redirected.

D. All ingress and egress traffic is redirected to the Cisco FirePOWER module.

View Answer