Question 1

Which two features of Cisco ISE contribute to guest access management? (Choose two.)

Accepted Answer

A)  employee-sponsored network access 
B)  faster device onboarding 
C)  guest access and activity tracking 
D)  accelerated security options 
E)  site-to-site VPNs
F) clientless network access 
A)  employee-sponsored network access 
B)  faster device onboarding 
C)  guest access and activity tracking 
D)  accelerated security options 
E)  site-to-site VPNs
F) clientless network access

Question 2

The current Cisco comprehensive framework solutions are divided into which three categories? (Choose three.)

Accepted Answer

A)  Content Security 
B)  Cloud Security 
C)  Network Security 
D)  Access Security 
E)  Data Center Security
F) Internet Security
G) Advanced Malware Protection 
A)  Content Security 
B)  Cloud Security 
C)  Network Security 
D)  Access Security 
E)  Data Center Security
F) Internet Security
G) Advanced Malware Protection

Question 3

Context Explorer can be accessed by a subset of user roles. Which predefined user role is not valid for FireSIGHT event access?

Accepted Answer

A)  Administrator 
B)  Intrusion Administrator 
C)  Security Analyst 
D)  Security Analyst (Read-Only) 
A)  Administrator 
B)  Intrusion Administrator 
C)  Security Analyst 
D)  Security Analyst (Read-Only)

Question 4

Which protocol operates below the network layer?

Accepted Answer

A)  UDP 
B)  ICMP 
C)  ARP 
D)  DNS 
A)  UDP 
B)  ICMP 
C)  ARP 
D)  DNS

Question 5

What is the maximum timeout value for a browser session?

Accepted Answer

A)  60 minutes 
B)  120 minutes 
C)  1024 minutes 
D)  1440 minutes 
A)  60 minutes 
B)  120 minutes 
C)  1024 minutes 
D)  1440 minutes

Question 6

Cisco Content Security integrates seamlessly with existing security and network infrastructures. This statement describes which Cisco value?

Accepted Answer

A)  time-to-value 
B)  protection 
C)  control 
D)  scalability 
E)  flexibility
F) agility 
A)  time-to-value 
B)  protection 
C)  control 
D)  scalability 
E)  flexibility
F) agility

Question 7

Which output method is the fastest for Snort?

Accepted Answer

A)  unified2 
B)  database 
C)  binary (tcpdump) 
D)  CSV 
A)  unified2 
B)  database 
C)  binary (tcpdump) 
D)  CSV

Question 8

What must you do to produce ASCII-formatted output from Snort?

Accepted Answer

A)  Do nothing because Snort produces ASCII output by default. 
B)  Use the -K ascii switch when you start Snort from the command line. 
C)  Compile Snort with the -K ascii flag in the configure command. 
D)  Use a third-party application to convert native Snort output to ASCII. 
A)  Do nothing because Snort produces ASCII output by default. 
B)  Use the -K ascii switch when you start Snort from the command line. 
C)  Compile Snort with the -K ascii flag in the configure command. 
D)  Use a third-party application to convert native Snort output to ASCII.

Question 9

Why do companies need the quickly scalable Cisco Secure Data Center virtualization and cloud technology solution?

Accepted Answer

A)  Fifty-six percent of employees who leave a company take private information with them. 
B)  Competitors are gaining a 33 percent market share. 
C)  Administrators are allowing a growing number of BYOD devices. 
D)  Staff is unable to keep up with newer data center technology. 
E)  Provisioning time for data centers has decreased from eight weeks to 15 minutes.
F) Management is expected to decrease IT budgets by 25 percent. 
A)  Fifty-six percent of employees who leave a company take private information with them. 
B)  Competitors are gaining a 33 percent market share. 
C)  Administrators are allowing a growing number of BYOD devices. 
D)  Staff is unable to keep up with newer data center technology. 
E)  Provisioning time for data centers has decreased from eight weeks to 15 minutes.
F) Management is expected to decrease IT budgets by 25 percent.

Question 10

Which statement is true concerning static NAT?

Accepted Answer

A)  Static NAT supports only TCP traffic. 
B)  Static NAT is normally deployed for outbound traffic only. 
C)  Static NAT provides a one-to-one mapping between IP addresses. 
D)  Static NAT provides a many-to-one mapping between IP addresses. 
A)  Static NAT supports only TCP traffic. 
B)  Static NAT is normally deployed for outbound traffic only. 
C)  Static NAT provides a one-to-one mapping between IP addresses. 
D)  Static NAT provides a many-to-one mapping between IP addresses.

Question 11

Which statement about two-step authentication is true?

Accepted Answer

A)  It is the ability to use two separate passwords. 
B)  It is the ability to enable biometric authentication. 
C)  It is the ability to have a passphrase sent to a mobile device. 
D)  It is the ability to use a verification code in conjunction with the correct username and password. 
A)  It is the ability to use two separate passwords. 
B)  It is the ability to enable biometric authentication. 
C)  It is the ability to have a passphrase sent to a mobile device. 
D)  It is the ability to use a verification code in conjunction with the correct username and password.

Question 12

Which two advanced malware protection features are available on Cisco AMP for Content? (Choose two.)

Accepted Answer

A)  URL filtering 
B)  retrospective security 
C)  attack chain weaving 
D)  breach hunting 
E)  trajectory
F) behavioral indications of compromise 
A)  URL filtering 
B)  retrospective security 
C)  attack chain weaving 
D)  breach hunting 
E)  trajectory
F) behavioral indications of compromise

Question 13

In a FireAMP Private Cloud installation, an administrator uses which server to configure the FireAMP Private Cloud properties?

Accepted Answer

A) opadmin..com B) console..com C) cloud..com D) aws..com A) opadmin..com B) console..com C) cloud..com D) aws..com

Question 14

How does the Device Trajectory feature work?

Accepted Answer

A)  It searches for potential threats based on identified activities. 
B)  It tracks file behavior across the network to see which devices it enters and exits. 
C)  It analyzes the data from file and process retrospection to provide a new level of threat intelligence. 
D)  It isolates suspicious files and runs tests to determine their authenticity. 
E)  It tracks file behavior on a device to pinpoint the root cause of a compromise. 
A)  It searches for potential threats based on identified activities. 
B)  It tracks file behavior across the network to see which devices it enters and exits. 
C)  It analyzes the data from file and process retrospection to provide a new level of threat intelligence. 
D)  It isolates suspicious files and runs tests to determine their authenticity. 
E)  It tracks file behavior on a device to pinpoint the root cause of a compromise.

Question 15

To execute a command in Linux while in the directory where it is located, and be sure you are only running that particular copy, what would you use in front of the executable name?

Accepted Answer

A)  ./ 
B)  ../ 
C)  ..\ 
D)  .\ 
A)  ./ 
B)  ../ 
C)  ..\ 
D)  .\

Question 16

Which command-line argument can you use with Snort to read a previously created file?

Accepted Answer

A)  -O 
B)  -o 
C)  -p 
D)  -r 
A)  -O 
B)  -o 
C)  -p 
D)  -r

Question 17

Which statement about implementing DAQ is true?

Accepted Answer

A)  It is a shell script that works on any Linux platform. 
B)  It must be compiled separately. 
C)  You must obtain it from Sourceforge. 
D)  It is not open source. 
A)  It is a shell script that works on any Linux platform. 
B)  It must be compiled separately. 
C)  You must obtain it from Sourceforge. 
D)  It is not open source.

Question 18

Cisco Email Security is ideal for which type of customer?

Accepted Answer

A)  customers who need sensitive data to remain onsite 
B)  customers whose expectations are set 
C)  customers who do not need cloud services 
D)  customers who want to move services to the cloud 
A)  customers who need sensitive data to remain onsite 
B)  customers whose expectations are set 
C)  customers who do not need cloud services 
D)  customers who want to move services to the cloud

Question 19

What does protocol normalization do?

Accepted Answer

A)  compares evaluated packets to normal, daily network-traffic patterns 
B)  removes any protocol-induced or protocol-allowable ambiguities 
C)  compares a packet to related traffic from the same session, to determine whether the packet is out of sequence 
D)  removes application layer data, whether or not it carries protocol-induced anomalies, so that packet headers can be inspected more accurately for signs of abuse 
A)  compares evaluated packets to normal, daily network-traffic patterns 
B)  removes any protocol-induced or protocol-allowable ambiguities 
C)  compares a packet to related traffic from the same session, to determine whether the packet is out of sequence 
D)  removes application layer data, whether or not it carries protocol-induced anomalies, so that packet headers can be inspected more accurately for signs of abuse

Question 20

What is the default command-line switch configuration, if you run a connector installation with no parameters?

Accepted Answer

A) /desktopicon 0 /startmenu 1 /contextmenu 1 /skipdfc 0 /skiptetra 0 B) /desktopicon 1 /startmenu 0 /contextmenu 0 /skipdfc 0 /skiptetra 0 C) /desktopicon 0 /startmenu 0 /contextmenu 0 /skipdfc 1 /skiptetra 1 D) /desktopicon 1 /startmenu 0 /contextmenu 0 /skipdfc 0 /skiptetra 1 A) /desktopicon 0 /startmenu 1 /contextmenu 1 /skipdfc 0 /skiptetra 0 B) /desktopicon 1 /startmenu 0 /contextmenu 0 /skipdfc 0 /skiptetra 0 C) /desktopicon 0 /startmenu 0 /contextmenu 0 /skipdfc 1 /skiptetra 1 D) /desktopicon 1 /startmenu 0 /contextmenu 0 /skipdfc 0 /skiptetra 1

Exam 47: Designing Cisco Unified Contact Center Enterprise (UCCED)

Which two features of Cisco ISE contribute to guest access management? (Choose two.)

The current Cisco comprehensive framework solutions are divided into which three categories? (Choose three.)

Context Explorer can be accessed by a subset of user roles. Which predefined user role is not valid for FireSIGHT event access?

Which protocol operates below the network layer?

What is the maximum timeout value for a browser session?

Cisco Content Security integrates seamlessly with existing security and network infrastructures. This statement describes which Cisco value?

Which output method is the fastest for Snort?

What must you do to produce ASCII-formatted output from Snort?

Why do companies need the quickly scalable Cisco Secure Data Center virtualization and cloud technology solution?

Which statement is true concerning static NAT?

Which statement about two-step authentication is true?

Which two advanced malware protection features are available on Cisco AMP for Content? (Choose two.)

In a FireAMP Private Cloud installation, an administrator uses which server to configure the FireAMP Private Cloud properties?

How does the Device Trajectory feature work?

To execute a command in Linux while in the directory where it is located, and be sure you are only running that particular copy, what would you use in front of the executable name?

Which command-line argument can you use with Snort to read a previously created file?

Which statement about implementing DAQ is true?

Cisco Email Security is ideal for which type of customer?

What does protocol normalization do?

What is the default command-line switch configuration, if you run a connector installation with no parameters?

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Cisco Certified Network Associate (CCNA)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Implementing Cisco SD-WAN Solutions (ENSDWI)

Designing Cisco Enterprise Networks (ENSLD)

Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Configuring Cisco MDS 9000 Series Switches (DCSAN)

Implementing Cisco Application Centric Infrastructure - Advanced

Automating Cisco Data Center Solutions (DCAUTO)

Securing Networks with Cisco Firepower (300-710 SNCF)

Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Securing Email with Cisco Email Security Appliance (300-720 SESA)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing and Operating Cisco Security Core Technologies

Implementing Cisco Collaboration Core Technologies (CLCOR)

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

CCDE Design Written

Deploying Cisco Unified Contact Center Express

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Cisco Security Architecture for System Engineers

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters