Question 1

When discussing the FireAMP product, which term does the acronym DFC represent?

Accepted Answer

A)  It means Detected Forensic Cause. 
B)  It means Duplicate File Contents. 
C)  It means Device Flow Correlation. 
D)  It is not an acronym that is associated with the FireAMP product. 
A)  It means Detected Forensic Cause. 
B)  It means Duplicate File Contents. 
C)  It means Device Flow Correlation. 
D)  It is not an acronym that is associated with the FireAMP product.

Question 2

Which file defines Snort IDs and associated alert labels that are not provided within the unified output format?

Accepted Answer

A)  snort-id.tab 
B)  snort-id.msg 
C)  sid-msg.map 
D)  sid-id.conf 
A)  snort-id.tab 
B)  snort-id.msg 
C)  sid-msg.map 
D)  sid-id.conf

Question 3

Which option is true when configuring an access control rule?

Accepted Answer

A)  You can use geolocation criteria to specify source IP addresses by country and continent, as well as destination IP addresses by country and continent. 
B)  You can use geolocation criteria to specify destination IP addresses by country but not source IP addresses. 
C)  You can use geolocation criteria to specify source and destination IP addresses by country but not by continent. 
D)  You can use geolocation criteria to specify source and destination IP addresses by continent but not by country. 
A)  You can use geolocation criteria to specify source IP addresses by country and continent, as well as destination IP addresses by country and continent. 
B)  You can use geolocation criteria to specify destination IP addresses by country but not source IP addresses. 
C)  You can use geolocation criteria to specify source and destination IP addresses by country but not by continent. 
D)  You can use geolocation criteria to specify source and destination IP addresses by continent but not by country.

Question 4

If Snort is installed and the sensor, database, and web server all reside on the same machine, to which ports should remote access of the sensor be restricted?

Accepted Answer

A)  22 and 443 
B)  80 and 443 
C)  443 and 3306 
D)  23 and 80 
A)  22 and 443 
B)  80 and 443 
C)  443 and 3306 
D)  23 and 80

Question 5

Other than navigating to the Network File Trajectory page for a file, which option is an alternative way of accessing the network trajectory of a file?

Accepted Answer

A)  from Context Explorer 
B)  from the Analysis menu 
C)  from the cloud 
D)  from the Defense Center 
A)  from Context Explorer 
B)  from the Analysis menu 
C)  from the cloud 
D)  from the Defense Center

Question 6

What are two reasons why companies need Cisco Unified Access technology? (Choose two.)

Accepted Answer

A)  Fifty-six percent of employees who leave a company take private information with them. 
B)  Competitors are gaining a 33 percent market share. 
C)  Eighty-one percent of businesses allow personal devices at work that require access. 
D)  Staff is unable to keep up with newer data center technology. 
E)  Provisioning time for data centers has decreased from eight weeks to 15 minutes.
F) Management is expected to decrease IT budgets by 25 percent.
G) Companies need to secure data with unified access policies and essential controls.
H) Cloud data storage is 60 percent less cost-efficient than on-premises storage. 
A)  Fifty-six percent of employees who leave a company take private information with them. 
B)  Competitors are gaining a 33 percent market share. 
C)  Eighty-one percent of businesses allow personal devices at work that require access. 
D)  Staff is unable to keep up with newer data center technology. 
E)  Provisioning time for data centers has decreased from eight weeks to 15 minutes.
F) Management is expected to decrease IT budgets by 25 percent.
G) Companies need to secure data with unified access policies and essential controls.
H) Cloud data storage is 60 percent less cost-efficient than on-premises storage.

Question 7

Which action should you perform to enable or disable entire classes of rules through the snort.conf file?

Accepted Answer

A)  Specify the -e or :-d command-line argument. 
B)  Comment or uncomment the rule class. 
C)  Build and reference a separate rules-configuration file. 
D)  Specify the enable or the disable argument. 
A)  Specify the -e or :-d command-line argument. 
B)  Comment or uncomment the rule class. 
C)  Build and reference a separate rules-configuration file. 
D)  Specify the enable or the disable argument.

Question 8

FireSIGHT recommendations appear in which layer of the Policy Layers page?

Accepted Answer

A)  Layer Summary 
B)  User Layers 
C)  Built-In Layers 
D)  FireSIGHT recommendations do not show up as a layer. 
A)  Layer Summary 
B)  User Layers 
C)  Built-In Layers 
D)  FireSIGHT recommendations do not show up as a layer.

Question 9

Which option is one of the three methods of updating the IP addresses in Sourcefire Security Intelligence?

Accepted Answer

A)  subscribe to a URL intelligence feed 
B)  subscribe to a VRT 
C)  upload a list that you create 
D)  automatically upload lists from a network share 
A)  subscribe to a URL intelligence feed 
B)  subscribe to a VRT 
C)  upload a list that you create 
D)  automatically upload lists from a network share

Question 10

Which option is true regarding the $HOME_NET variable?

Accepted Answer

A)  is a policy-level variable 
B)  has a default value of "all" 
C)  defines the network the active policy protects 
D)  is used by all rules to define the internal network 
A)  is a policy-level variable 
B)  has a default value of "all" 
C)  defines the network the active policy protects 
D)  is used by all rules to define the internal network

Question 11

Which character must a rule body end with?

Accepted Answer

A)  parenthesis 
B)  period 
C)  exclamation mark 
D)  semicolon 
A)  parenthesis 
B)  period 
C)  exclamation mark 
D)  semicolon

Question 12

One of the goals of geolocation is to identify which option?

Accepted Answer

A)  the location of any IP address 
B)  the location of a MAC address 
C)  the location of a TCP connection 
D)  the location of a routable IP address 
A)  the location of any IP address 
B)  the location of a MAC address 
C)  the location of a TCP connection 
D)  the location of a routable IP address

Question 13

Which engine or module presents alert and log data in the format that you specify?

Accepted Answer

A)  tap 
B)  sniffing 
C)  detection 
D)  output 
A)  tap 
B)  sniffing 
C)  detection 
D)  output

Question 14

How can customers feed new intelligence such as files and hashes to FireAMP?

Accepted Answer

A)  by uploading it to the FTP server 
B)  from the connector 
C)  through the management console 
D)  by sending it via email 
A)  by uploading it to the FTP server 
B)  from the connector 
C)  through the management console 
D)  by sending it via email

Question 15

What is a GID?

Accepted Answer

A)  general intrusion domain 
B)  Generator ID 
C)  Gigabit interface definition 
D)  gradual interrupt detection 
A)  general intrusion domain 
B)  Generator ID 
C)  Gigabit interface definition 
D)  gradual interrupt detection

Question 16

What is the default clean disposition cache setting?

Accepted Answer

A)  3600 
B)  604800 
C)  10080 
D)  1 hour 
A)  3600 
B)  604800 
C)  10080 
D)  1 hour

Question 17

Which two solutions are main components of Cisco Content Security? (Choose two.)

Accepted Answer

A)  Cisco ASA Next-Generation Firewall 
B)  Cisco Web Security 
C)  Cisco Remote-Access VPN 
D)  Sourcefire Next-Generation Intrusion Prevention System 
E)  Cisco Email Security
F) Cisco Advanced Malware Protection 
A)  Cisco ASA Next-Generation Firewall 
B)  Cisco Web Security 
C)  Cisco Remote-Access VPN 
D)  Sourcefire Next-Generation Intrusion Prevention System 
E)  Cisco Email Security
F) Cisco Advanced Malware Protection

Question 18

When a user initiates a scan, which types of scan are available as options?

Accepted Answer

A)  scheduled scan, thorough scan, quick scan, network scan 
B)  jiffy scan, overnight scan, scan when available, vulnerability scan 
C)  flash scan, custom scan, full scan 
D)  none, because user-initiated scans are not allowed 
A)  scheduled scan, thorough scan, quick scan, network scan 
B)  jiffy scan, overnight scan, scan when available, vulnerability scan 
C)  flash scan, custom scan, full scan 
D)  none, because user-initiated scans are not allowed

Question 19

Which four solutions are Cisco network security solutions? (Choose four.)

Accepted Answer

A)  Cisco site-to-site VPN technologies 
B)  Cisco Identity and Access Control 
C)  Cisco Email Security 
D)  Cisco Web Security Appliance 
E)  Sourcefire Next-Generation Intrusion Prevention System
F) Cisco ASA Next-Generation Firewall
G) Cisco security appliance
H) Cisco Remote-Access VPN 
A)  Cisco site-to-site VPN technologies 
B)  Cisco Identity and Access Control 
C)  Cisco Email Security 
D)  Cisco Web Security Appliance 
E)  Sourcefire Next-Generation Intrusion Prevention System
F) Cisco ASA Next-Generation Firewall
G) Cisco security appliance
H) Cisco Remote-Access VPN

Question 20

In the IP addressing scheme of your organization, each subnet consists of 4096 hosts, and the beginning of the addressing scheme is 172.16.0.0. Your remote office is allocated the range of addresses from the first subnet. What are the CIDR notation, network address, broadcast address, and valid IP address in your assigned range?

Accepted Answer

A)  172.16.0.0/24, 172.16.0.0, 172.16.8.255, 172.16.0.51 
B)  172.16.0.0/20, 172.16.0.0, 172.16.15.255, 172.16.8.252 
C)  172.16.0.0/16, 172.16.0.0, 172.16.32.255, 172.16.22.4 
D)  172.16.0.0/12, 172.16.0.0, 172.16.64.255, 172.16.52.112 
A)  172.16.0.0/24, 172.16.0.0, 172.16.8.255, 172.16.0.51 
B)  172.16.0.0/20, 172.16.0.0, 172.16.15.255, 172.16.8.252 
C)  172.16.0.0/16, 172.16.0.0, 172.16.32.255, 172.16.22.4 
D)  172.16.0.0/12, 172.16.0.0, 172.16.64.255, 172.16.52.112

Exam 47: Designing Cisco Unified Contact Center Enterprise (UCCED)

When discussing the FireAMP product, which term does the acronym DFC represent?

Which file defines Snort IDs and associated alert labels that are not provided within the unified output format?

Which option is true when configuring an access control rule?

If Snort is installed and the sensor, database, and web server all reside on the same machine, to which ports should remote access of the sensor be restricted?

Other than navigating to the Network File Trajectory page for a file, which option is an alternative way of accessing the network trajectory of a file?

What are two reasons why companies need Cisco Unified Access technology? (Choose two.)

Which action should you perform to enable or disable entire classes of rules through the snort.conf file?

FireSIGHT recommendations appear in which layer of the Policy Layers page?

Which option is one of the three methods of updating the IP addresses in Sourcefire Security Intelligence?

Which option is true regarding the $HOME_NET variable?

Which character must a rule body end with?

One of the goals of geolocation is to identify which option?

Which engine or module presents alert and log data in the format that you specify?

How can customers feed new intelligence such as files and hashes to FireAMP?

What is a GID?

What is the default clean disposition cache setting?

Which two solutions are main components of Cisco Content Security? (Choose two.)

When a user initiates a scan, which types of scan are available as options?

Which four solutions are Cisco network security solutions? (Choose four.)

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Cisco Certified Network Associate (CCNA)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Implementing Cisco SD-WAN Solutions (ENSDWI)

Designing Cisco Enterprise Networks (ENSLD)

Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Configuring Cisco MDS 9000 Series Switches (DCSAN)

Implementing Cisco Application Centric Infrastructure - Advanced

Automating Cisco Data Center Solutions (DCAUTO)

Securing Networks with Cisco Firepower (300-710 SNCF)

Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Securing Email with Cisco Email Security Appliance (300-720 SESA)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing and Operating Cisco Security Core Technologies

Implementing Cisco Collaboration Core Technologies (CLCOR)

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

CCDE Design Written

Deploying Cisco Unified Contact Center Express

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Cisco Security Architecture for System Engineers

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters