Question 1

Which component of Cisco network security is updated after an attack to help prevent threats before they encounter the network again?

Accepted Answer

A)  Cisco site-to-site VPN 
B)  Cisco Identity and Access Control 
C)  Cisco Email Security 
D)  Cisco Web Security Appliance 
E)  Sourcefire Next-Generation Intrusion Prevention System
F) Cisco ASA Next-Generation Firewall
G) Cisco Security Intelligence Operations 
A)  Cisco site-to-site VPN 
B)  Cisco Identity and Access Control 
C)  Cisco Email Security 
D)  Cisco Web Security Appliance 
E)  Sourcefire Next-Generation Intrusion Prevention System
F) Cisco ASA Next-Generation Firewall
G) Cisco Security Intelligence Operations

Question 2

How is the basic construct of a port variable formatted in the Snort.conf file?

Accepted Answer

A)  variable 
B)  var arguments 
C)  portvar value 
D)  port variable 
A)  variable 
B)  var arguments 
C)  portvar value 
D)  port variable

Question 3

Where does an administrator go to get a copy of a fetched file?

Accepted Answer

A)  the Business Defaults page 
B)  the File menu, followed by Downloads Real 17 Cisco 500-275 Exam 
C)  the File Repository 
D)  the Search selection in the Analysis menu 
A)  the Business Defaults page 
B)  the File menu, followed by Downloads Real 17 Cisco 500-275 Exam 
C)  the File Repository 
D)  the Search selection in the Analysis menu

Question 4

What does packet sniffing do?

Accepted Answer

A)  isolates datagrams into like groups 
B)  reads datagrams directly off the wire 
C)  transmits datagrams over a wireless network 
D)  rebuilds datagram streams 
A)  isolates datagrams into like groups 
B)  reads datagrams directly off the wire 
C)  transmits datagrams over a wireless network 
D)  rebuilds datagram streams

Question 5

Which Cisco Secure Access solution should you recommend to a customer who is experiencing access complications due to too many policies and too many user groups?

Accepted Answer

A)  Cisco AnyConnect 
B)  Cisco TrustSec 
C)  Cisco ISE 
D)  Cisco AMP for Endpoints 
E)  Cisco site-to-site VPN
F) Cisco SIO 
A)  Cisco AnyConnect 
B)  Cisco TrustSec 
C)  Cisco ISE 
D)  Cisco AMP for Endpoints 
E)  Cisco site-to-site VPN
F) Cisco SIO

Question 6

Which statement is true regarding malware blocking over HTTP?

Accepted Answer

A)  It can be done only in the download direction. 
B)  It can be done only in the upload direction. 
C)  It can be done in both the download and upload direction. 
D)  HTTP is not a supported protocol for malware blocking. 
A)  It can be done only in the download direction. 
B)  It can be done only in the upload direction. 
C)  It can be done in both the download and upload direction. 
D)  HTTP is not a supported protocol for malware blocking.

Question 7

Which FireAMP capability can tell you how malware has spread in a network?

Accepted Answer

A)  File Analysis 
B)  Threat Root Cause 
C)  File Trajectory 
D)  Heat Map 
A)  File Analysis 
B)  Threat Root Cause 
C)  File Trajectory 
D)  Heat Map

Question 8

Which Sourcefire feature allows you to send traffic directly through the device without inspecting it?

Accepted Answer

A)  fast-path rules 
B)  thresholds or suppressions 
C)  blacklist 
D)  automatic application bypass 
A)  fast-path rules 
B)  thresholds or suppressions 
C)  blacklist 
D)  automatic application bypass

Question 9

Which two features of Cisco AnyConnect contribute to secure remote access? (Choose two.)

Accepted Answer

A)  guest access management 
B)  superior clientless network access 
C)  accelerated security options 
D)  compliance and tracking 
E)  context-aware access
F) extensive BYOD support
G) centralized management 
A)  guest access management 
B)  superior clientless network access 
C)  accelerated security options 
D)  compliance and tracking 
E)  context-aware access
F) extensive BYOD support
G) centralized management

Question 10

Which item examines packets for malformation, anomalies, and protocol compliance and gathers and presents packets in one consistent fashion?

Accepted Answer

A)  Sniffer 
B)  preprocessors 
C)  detection engine 
D)  output and alerting module 
A)  Sniffer 
B)  preprocessors 
C)  detection engine 
D)  output and alerting module

Question 11

Why do companies need Cisco Cyber Threat Defense?

Accepted Answer

A)  They have a lack of segmented or differentiated access. 
B)  They are inundated with advanced persistent threats. 
C)  They need to add and provision servers faster than ever. 
D)  They have increased bandwidth needs, and they allow BYOD. 
E)  They have an infrastructure of overlapping rule sets, complex inheritance, and oversubscription.
F) They need cost-effective security management outsourcing. 
A)  They have a lack of segmented or differentiated access. 
B)  They are inundated with advanced persistent threats. 
C)  They need to add and provision servers faster than ever. 
D)  They have increased bandwidth needs, and they allow BYOD. 
E)  They have an infrastructure of overlapping rule sets, complex inheritance, and oversubscription.
F) They need cost-effective security management outsourcing.

Question 12

Which two features are part of site-to-site VPN? (Choose two.)

Accepted Answer

A)  web email controls 
B)  user identity traction 
C)  SSL decryption 
D)  Snort technology 
E)  remote access
F) seamless connection with Cisco ASA 
A)  web email controls 
B)  user identity traction 
C)  SSL decryption 
D)  Snort technology 
E)  remote access
F) seamless connection with Cisco ASA

Question 13

Which option describes a requirement for using Remote File Fetch?

Accepted Answer

A)  It must be done from a private cloud console. 
B)  It can be done only over port 32137. 
C)  The administrator must have two-step authentication enabled. 
D)  The feature is integrated into the product, so no specific requirements must be fulfilled. 
A)  It must be done from a private cloud console. 
B)  It can be done only over port 32137. 
C)  The administrator must have two-step authentication enabled. 
D)  The feature is integrated into the product, so no specific requirements must be fulfilled.

Question 14

The Update Window allows you to perform which action?

Accepted Answer

A)  identify which hosts need to be updated 
B)  email the user to download a new client 
C)  specify a timeframe when an upgrade can be started and stopped 
D)  update your cloud instance 
A)  identify which hosts need to be updated 
B)  email the user to download a new client 
C)  specify a timeframe when an upgrade can be started and stopped 
D)  update your cloud instance

Question 15

Which statement about the distribution of SO rules is true?

Accepted Answer

A)  SO rules ship with the regular rules download. 
B)  SO rules ship with the regular Snort distribution. 
C)  SO rules ship as a separate download. 
D)  SO rules are not distributed because you need to build your own rules. 
A)  SO rules ship with the regular rules download. 
B)  SO rules ship with the regular Snort distribution. 
C)  SO rules ship as a separate download. 
D)  SO rules are not distributed because you need to build your own rules.

Question 16

Which disposition can be returned in response to a malware cloud lookup?

Accepted Answer

A)  Dirty 
B)  Virus 
C)  Malware 
D)  Infected 
A)  Dirty 
B)  Virus 
C)  Malware 
D)  Infected

Question 17

Which three solutions are Cisco Secure Access solutions? (Choose three.)

Accepted Answer

A)  Cisco Remote-Access VPN 
B)  Cisco Identity and Access Control 
C)  Cisco Email Security 
D)  Cisco Web Security Appliance 
E)  Sourcefire Next-Generation Intrusion Prevention System
F) Cisco Advanced Malware Protection for Endpoints
G) Cisco security appliance
H) Cisco Security Manager 
A)  Cisco Remote-Access VPN 
B)  Cisco Identity and Access Control 
C)  Cisco Email Security 
D)  Cisco Web Security Appliance 
E)  Sourcefire Next-Generation Intrusion Prevention System
F) Cisco Advanced Malware Protection for Endpoints
G) Cisco security appliance
H) Cisco Security Manager

Question 18

Which statement describes an advantage of the FireAMP product?

Accepted Answer

A)  Signatures are pushed to endpoints more quickly than other antivirus products. 
B)  Superior detection algorithms on the endpoint limit the amount of work the cloud must perform. 
C)  It provides enterprise visibility. 
D)  It relies on sandboxing. 
A)  Signatures are pushed to endpoints more quickly than other antivirus products. 
B)  Superior detection algorithms on the endpoint limit the amount of work the cloud must perform. 
C)  It provides enterprise visibility. 
D)  It relies on sandboxing.

Question 19

The Accounts menu contains items that are related to FireAMP console accounts. Which menu allows you to set the default group policy? Real 14 Cisco 500-275 Exam

Accepted Answer

A)  Audit Log 
B)  Users 
C)  Applications 
D)  Business 
A)  Audit Log 
B)  Users 
C)  Applications 
D)  Business

Question 20

Which Cisco IPS feature adapts in real time to detect and block intrusions that range from never- before-seen worms to the most sophisticated and subtle criminal attacks?

Accepted Answer

A)  file-type detection 
B)  intelligent detection 
C)  user identity tracking 
D)  SSL decryption 
E)  impact assessment
F) automated policy tuning 
A)  file-type detection 
B)  intelligent detection 
C)  user identity tracking 
D)  SSL decryption 
E)  impact assessment
F) automated policy tuning

Exam 47: Designing Cisco Unified Contact Center Enterprise (UCCED)

Which component of Cisco network security is updated after an attack to help prevent threats before they encounter the network again?

How is the basic construct of a port variable formatted in the Snort.conf file?

Where does an administrator go to get a copy of a fetched file?

What does packet sniffing do?

Which Cisco Secure Access solution should you recommend to a customer who is experiencing access complications due to too many policies and too many user groups?

Which statement is true regarding malware blocking over HTTP?

Which FireAMP capability can tell you how malware has spread in a network?

Which Sourcefire feature allows you to send traffic directly through the device without inspecting it?

Which two features of Cisco AnyConnect contribute to secure remote access? (Choose two.)

Which item examines packets for malformation, anomalies, and protocol compliance and gathers and presents packets in one consistent fashion?

Why do companies need Cisco Cyber Threat Defense?

Which two features are part of site-to-site VPN? (Choose two.)

Which option describes a requirement for using Remote File Fetch?

The Update Window allows you to perform which action?

Which statement about the distribution of SO rules is true?

Which disposition can be returned in response to a malware cloud lookup?

Which three solutions are Cisco Secure Access solutions? (Choose three.)

Which statement describes an advantage of the FireAMP product?

The Accounts menu contains items that are related to FireAMP console accounts. Which menu allows you to set the default group policy? Real 14 Cisco 500-275 Exam

Which Cisco IPS feature adapts in real time to detect and block intrusions that range from never- before-seen worms to the most sophisticated and subtle criminal attacks?

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Cisco Certified Network Associate (CCNA)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Implementing Cisco SD-WAN Solutions (ENSDWI)

Designing Cisco Enterprise Networks (ENSLD)

Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Configuring Cisco MDS 9000 Series Switches (DCSAN)

Implementing Cisco Application Centric Infrastructure - Advanced

Automating Cisco Data Center Solutions (DCAUTO)

Securing Networks with Cisco Firepower (300-710 SNCF)

Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Securing Email with Cisco Email Security Appliance (300-720 SESA)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing and Operating Cisco Security Core Technologies

Implementing Cisco Collaboration Core Technologies (CLCOR)

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

CCDE Design Written

Deploying Cisco Unified Contact Center Express

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Cisco Security Architecture for System Engineers

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters