Question 1

Which feature of ISE has the capability to encounter a device new on the market, and correctly profile it to onboard it quickly and easily?

Accepted Answer

A)  Device profiling 
B)  Centralized policy management 
C)  Context-aware access 
D)  Platform exchange grid 
A)  Device profiling 
B)  Centralized policy management 
C)  Context-aware access 
D)  Platform exchange grid A

Question 2

Which feature of StealthWatch aggregates and normalizes NetFlow data?

Accepted Answer

A)  Netflow analytics 
B)  Forensic investigation 
C)  Advanced malware protection 
D)  FlowCollector 
A)  Netflow analytics 
B)  Forensic investigation 
C)  Advanced malware protection 
D)  FlowCollector D

Question 3

What is one of the key features of Cognitive Intelligence?

Accepted Answer

A)  Allows visibility into anonymous and encrypted communications 
B)  It enables greater threat intelligence with entity modeling 
C)  It enables safe email usage with event analytics 
D)  It enhances anonymity with URL filtering 
A)  Allows visibility into anonymous and encrypted communications 
B)  It enables greater threat intelligence with entity modeling 
C)  It enables safe email usage with event analytics 
D)  It enhances anonymity with URL filtering A

Question 4

What are two result of utilizing a fragmented security model? (Choose two.)

Accepted Answer

A)  Reduced malicious file risk through additional segmentation. 
B)  Decreased network accessibility through multiple applications. 
C)  Decreased visibility and limited understand of security coverage. 
D)  Increased identity controls 
E)  Individual components pieced together to meet requirements. 
A)  Reduced malicious file risk through additional segmentation. 
B)  Decreased network accessibility through multiple applications. 
C)  Decreased visibility and limited understand of security coverage. 
D)  Increased identity controls 
E)  Individual components pieced together to meet requirements.

Question 5

What are three main areas of the Cisco Security Portfolio? (Choose three.)

Accepted Answer

A)  IoT Security 
B)  Roaming Security 
C)  Advanced Threat 
D)  Cloud Security 
E)  Voice & Collaboration
F) Firewalls 
A)  IoT Security 
B)  Roaming Security 
C)  Advanced Threat 
D)  Cloud Security 
E)  Voice & Collaboration
F) Firewalls

Question 6

Which two attack vectors are protected by MFA? (Choose two.)

Accepted Answer

A)  Mobile 
B)  Cloud 
C)  Data center 
D)  Web 
E)  Endpoints 
A)  Mobile 
B)  Cloud 
C)  Data center 
D)  Web 
E)  Endpoints

Question 7

Which two attack vendors are protected by Visibility and Enforcement? (Choose two.)

Accepted Answer

A)  Web 
B)  Cloud 
C)  Endpoints 
D)  Email 
E)  Mobile 
A)  Web 
B)  Cloud 
C)  Endpoints 
D)  Email 
E)  Mobile

Question 8

Which two features are part of Cisco Web security? (Choose two.)

Accepted Answer

A)  user authentication 
B)  device profiling and onboarding 
C)  URL filtering & dynamic content analysis 
D)  intrusion prevention 
E)  user identity tracking 
A)  user authentication 
B)  device profiling and onboarding 
C)  URL filtering & dynamic content analysis 
D)  intrusion prevention 
E)  user identity tracking

Question 9

What are three security blind spots that must be addressed? (Choose three.)

Accepted Answer

A)  Workloads 
B)  Data 
C)  Networks 
D)  IT 
E)  Applications
F) Email 
A)  Workloads 
B)  Data 
C)  Networks 
D)  IT 
E)  Applications
F) Email

Question 10

Which two Cisco products remediate network, cloud, and endpoint threats? (Choose two.)

Accepted Answer

A)  AMP for Endpoints 
B)  Duo 
C)  Cisco Security Connector 
D)  pxGrid 
E)  Stealthwatch 
A)  AMP for Endpoints 
B)  Duo 
C)  Cisco Security Connector 
D)  pxGrid 
E)  Stealthwatch

Question 11

What are two areas present a security challenge for customers? (Choose two.)

Accepted Answer

A)  Email 
B)  Corporate priorities 
C)  IoT devices 
D)  IT departments 
E)  OT environments 
A)  Email 
B)  Corporate priorities 
C)  IoT devices 
D)  IT departments 
E)  OT environments

Question 12

What is one of the reasons that customers need a Visibility & Enforcement solution?

Accepted Answer

A)  Storage is moving from on-premises to cloud-based 
B)  Network traffic is growing at an exponential rate 
C)  Organizations need the ability to block high-risk websites 
D)  Businesses can't see or protect devices on their network 
A)  Storage is moving from on-premises to cloud-based 
B)  Network traffic is growing at an exponential rate 
C)  Organizations need the ability to block high-risk websites 
D)  Businesses can't see or protect devices on their network

Question 13

Which feature of AnyConnect provides customers the ability to monitor endpoint application usage to uncover potential behavior anomalies?

Accepted Answer

A)  Differentiated Mobile Access 
B)  Secure Layer 2 Network Access 
C)  Trusted Network Detection 
D)  Network Visibility Module 
A)  Differentiated Mobile Access 
B)  Secure Layer 2 Network Access 
C)  Trusted Network Detection 
D)  Network Visibility Module

Question 14

Which two attack vectors are protected by NGFW? (Choose two.)

Accepted Answer

A)  Mobile 
B)  Data Center 
C)  Cloud 
D)  Web 
E)  Email 
A)  Mobile 
B)  Data Center 
C)  Cloud 
D)  Web 
E)  Email

Question 15

What does TrustSec assign to the user or device traffic at ingress that enforces the access policy based on the tag in the infrastructure?

Accepted Answer

A)  VXLAN 
B)  Ingress VLAN 
C)  Security Group Tag 
D)  Access Control List 
A)  VXLAN 
B)  Ingress VLAN 
C)  Security Group Tag 
D)  Access Control List

Question 16

Which two products are involved in discovering, classifying, and verifying profiles? (Choose two.)

Accepted Answer

A)  Duo 
B)  Cisco Security Connector 
C)  Industrial Network Director 
D)  Identity Services Engine 
E)  Advanced Malware Protection 
A)  Duo 
B)  Cisco Security Connector 
C)  Industrial Network Director 
D)  Identity Services Engine 
E)  Advanced Malware Protection

Question 17

What does remote access use to verify identity?

Accepted Answer

A)  Agents 
B)  MFA 
C)  Remote Access VPN 
D)  AMP for Endpoints 
A)  Agents 
B)  MFA 
C)  Remote Access VPN 
D)  AMP for Endpoints

Question 18

In which two ways has digitization transformed today's security threat landscape? (Choose two.)

Accepted Answer

A)  Decreasing endpoint ecosystem 
B)  Increasing access points 
C)  Expanding complexity 
D)  Decreasing 3rd party applications 
E)  Growing ecosystem 
A)  Decreasing endpoint ecosystem 
B)  Increasing access points 
C)  Expanding complexity 
D)  Decreasing 3rd party applications 
E)  Growing ecosystem

Question 19

How does SD-WAN protect network traffic from end-to-end?

Accepted Answer

A)  Management 
B)  Automation 
C)  Segmentation 
D)  Analyzation 
A)  Management 
B)  Automation 
C)  Segmentation 
D)  Analyzation

Question 20

How does AnyConnect provide highly secure access for select enterprise mobile apps?

Accepted Answer

A)  Per application VPN 
B)  Secure Layer 2 Network Access 
C)  Application Visibility & control 
D)  Identity Service Engine 
A)  Per application VPN 
B)  Secure Layer 2 Network Access 
C)  Application Visibility & control 
D)  Identity Service Engine

Exam 50: Cisco Security Architecture for System Engineers

Which feature of ISE has the capability to encounter a device new on the market, and correctly profile it to onboard it quickly and easily?

Which feature of StealthWatch aggregates and normalizes NetFlow data?

What is one of the key features of Cognitive Intelligence?

What are two result of utilizing a fragmented security model? (Choose two.)

What are three main areas of the Cisco Security Portfolio? (Choose three.)

Which two attack vectors are protected by MFA? (Choose two.)

Which two attack vendors are protected by Visibility and Enforcement? (Choose two.)

Which two features are part of Cisco Web security? (Choose two.)

What are three security blind spots that must be addressed? (Choose three.)

Which two Cisco products remediate network, cloud, and endpoint threats? (Choose two.)

What are two areas present a security challenge for customers? (Choose two.)

What is one of the reasons that customers need a Visibility & Enforcement solution?

Which feature of AnyConnect provides customers the ability to monitor endpoint application usage to uncover potential behavior anomalies?

Which two attack vectors are protected by NGFW? (Choose two.)

What does TrustSec assign to the user or device traffic at ingress that enforces the access policy based on the tag in the infrastructure?

Which two products are involved in discovering, classifying, and verifying profiles? (Choose two.)

What does remote access use to verify identity?

In which two ways has digitization transformed today's security threat landscape? (Choose two.)

How does SD-WAN protect network traffic from end-to-end?

How does AnyConnect provide highly secure access for select enterprise mobile apps?

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Cisco Certified Network Associate (CCNA)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Implementing Cisco SD-WAN Solutions (ENSDWI)

Designing Cisco Enterprise Networks (ENSLD)

Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Configuring Cisco MDS 9000 Series Switches (DCSAN)

Implementing Cisco Application Centric Infrastructure - Advanced

Automating Cisco Data Center Solutions (DCAUTO)

Securing Networks with Cisco Firepower (300-710 SNCF)

Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Securing Email with Cisco Email Security Appliance (300-720 SESA)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing and Operating Cisco Security Core Technologies

Implementing Cisco Collaboration Core Technologies (CLCOR)

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

CCDE Design Written

Deploying Cisco Unified Contact Center Express

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Designing Cisco Unified Contact Center Enterprise (UCCED)

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters