Question No. 1

What type of interface is required to pass VLAN tagged traffic from one network to another on a Firepower 7125?

• A. logical switched
• B. logical routed
• C. physical switched
• D. hybrid
• E. physical routed

Question No. 2

Which two features of Cisco Email Security can protect your organization against email threats? (Choose two.)

• A. Time-based one-time passwords
• B. Data loss prevention
• C. NetFlow
• D. Geolocation-based filtering
• E. heuristic-based filtering

Question No. 3

You configure an antispam policy on a Cisco ESA Which action can you take on the messages that positively contain identify spam*?

• A. Modify the recipient of each message
• B. Send a customized alert with each message
• C. Deliver the messages with an altered subject
• D. Repair the messages

Question No. 4

What are three arguments that can be used with the show content-scan command in Cisco IOS software? (Choose three)

• A. session
• B. data
• C. verbose
• D. buffer
• E. summary
• F. statistics

Question No. 5

Scenario

The Cisco Email Security Appliance will reject messages from which domains?

• A. red. public
• B. red. public and orange. public
• C. red. public, orange. Public and yellow. public
• D. orange. public
• E. violet. public
• F. violet. public and blue.public
• G. None of the listed domains

Question No. 6

Which two practices are recommended for implementing NIPS at enterprise Internet edges? (Choose two.)

• A. Integrate sensors primarily on the more trusted side of the firewall (inside or DMZ interfaces).
• B. Integrate sensors primarily on the less trusted side of the firewall (outside interfaces).
• C. Implement redundant IPS and make data paths symmetrical.
• D. Implement redundant IPS and make data paths asymmetrical.
• E. Use NIPS only for small implementations.

Question No. 7

Which two Cisco technologies must you use to enable transparent user identification on a Cisco WSA?

• A. Cisco CDA
• B. Cisco Prime infrastructure
• C. Cisco CSM
• D. Cisco ACS
• E. Cisco ISE

Question No. 8

Refer to the following.

Router (config) #username admin secret cisco

Router (config) #no service password-encryption

How is the ‘cisco’ password stored?

• A. As MD5 hash
• B. As Type 0
• C. As Type 7
• D. As Clear Text

Question No. 9

Which two appliances support logical routed interfaces within a virtual router? (Choose two. )

• A. Firepower services for ASA-5500-X
• B. FP-9300 series
• C. FP-7000-series
• D. FP-8000-series
• E. FP-4100-senes

Question No. 10

When centralized message tracking is enabled on the Cisco ESA, over which port does the communication to the SMA occur by default?

• A. port 2222/TCP
• B. port 443/TCP
• C. port 25/TCP
• D. port 22/TCP

Question No. 11

Scenario

The Cisco Email Security Appliance will reject messages from which domains?

• A. red. public
• B. red. public and orange. public
• C. red. public, orange. Public and yellow. public
• D. orange. public
• E. violet. public
• F. violet. public and blue.public
• G. None of the listed domains

Question No. 12

Which five system management protocols are supported by the Intrusion Prevention System? (Choose five.)

• A. SNMPv2c
• B. SNMPv1
• C. SNMPv2
• D. SNMPv3
• E. syslog
• F. SDEE
• G. SMTP

Question No. 13

Which capability is exclusive to a Cisco AMP public cloud instance as compared to a private cloud instance?

• A. SPERO detection engine
• B. RBAC
• C. TETRA detection engine
• D. ETHQS detection engine

Question No. 14

What are two requirements for configuring a hybrid interface in FirePOWER? (Choose two)

• A. virtual network
• B. virtual router
• C. virtual appliance
• D. virtual switch
• E. virtual context