Implementing and Operating Cisco Security Core Technologies (SCOR)654 questions across 66 pages are complete and free, with no account or card.
654 questions in this bank
Free access · progress saved on this device
Which technology must be used to implement secure VPN connectivity among company branches over a private IP cloud with any-to-any scalable connectivity?
Answer: D
you can use DMVPN with private IPs also GET VPN is more scalable and needs less resources, but can't be used on internet because IP preservation I think they expect GET VPN here
Source: Adapted from community discussion — Kris92
What are two functions of TAXII in threat intelligence sharing? (Choose two.)
Answer: BE
Correct is : B & E: TAXII, short for Trusted Automated eXchange of Intelligence Information, defines how cyber threat information can be shared via services and message exchanges. It is designed specifically to support STIX information, which it does by defining an API that aligns with common sharing models. The three principal models for TAXII include: TAXII defines four services. Users can select and implement as many as they require, and combine them for different sharing models.
Source: Adapted from community discussion — Initial14
What are two functionalities of SDN Northbound APIs? (Choose two.)
Answer: BC
What is the function of a northbound API? Northbound APIs are the link between the applications and the SDN controller. The applications can tell the network what they need (data, storage, bandwidth, and so on) and the network can deliver those resources, or communicate what it has.
Source: Adapted from community discussion — CCNP21
What is the result of the ACME-Router(config)#login block-for 100 attempts 4 within 60 command on a Cisco IOS router?
Answer: A
The correct answer is A. The command "login block-for 100 attempts 4 within 60" configures the router to block access to the login prompt for 100 seconds if there are four or more failed login attempts within a 60-second period. During this time, the router goes into quiet mode and does not respond to any login requests.
Source: Adapted from community discussion — sull3y
What is a benefit of using a multifactor authentication strategy?
Answer: C
he correct answer is C. A multifactor authentication (MFA) strategy adds an additional layer of security to the authentication process by requiring users to provide multiple forms of authentication. This can include something the user knows (like a password), something the user has (like a security token), or something the user is (like biometric data). The benefit of using a multifactor authentication strategy is that it provides an additional level of protection to sensitive data and systems by requiring a second validation of identity beyond just a password. This makes it much harder for unauthorized users to gain access to systems or data, even if they have managed to obtain a user's password.
Source: Adapted from community discussion — sull3y
Which endpoint solution protects a user from a phishing attack?
Answer: B
def B The Cisco Umbrella Roaming Security module for Cisco AnyConnect provides always-on security on any network, anywhere, any time—both on and off your corporate VPN. The Roaming Security module enforces security at the DNS layer to block malware, phishing, and command and control callbacks over any port
Source: Adapted from community discussion — terminader
Which role is a default guest type in Cisco ISE?
Answer: A
Cisco ISE includes these default guest types: Contractor—Users who need access to the network for an extended amount of time, up to a year. Daily—Guests who need access to the resources on the network for just 1 to 5 days. Weekly—Users who need access to the network for a couple of weeks
Source: Adapted from community discussion — amtf8888
An engineer is trying to decide between using L2TP or GRE over IPsec for their site-to-site VPN implementation. What must be understood before choosing a solution?
Answer: A
https://www.ibm.com/docs/en/i/7.4?topic=concepts-layer-2-tunnel-protocol L2TP is actually a variation of an IP encapsulation protocol. The L2TP tunnel is created by encapsulating an L2TP frame inside a User Datagram Protocol (UDP) packet, which in turn is encapsulated inside an IP packet. https://learningnetwork.cisco.com/s/question/0D53i00000KstmKCAR/difference-between-gre-and-ipsec https://www.cloudflare.com/learning/network-layer/what-is-gre-tunneling/ GRE is a tunneling protocol
Source: Adapted from community discussion — ffaiz
An administrator enables Cisco Threat Intelligence Director on a Cisco FMC. Which process uses STIX and allows uploads and downloads of block lists?
Answer: D
It is Consumption. --- https://www.cisco.com/c/en/us/support/docs/storage-networking/security/214859-configure-and-troubleshoot-cisco-threat.html --- Cisco Threat Intelligence Director (TID) is a system that operationalizes threat intelligence information. The system consumes and normalizes heterogeneous third-party cyber threat intelligence, publishes the intelligence to detection technologies and correlates the observations from the detection technologies.
Source: Adapted from community discussion — Anonymous983475
Which two methods must be used to add switches into the fabric so that administrators can control how switches are added into DCNM for private cloud management? (Choose two.)
Answer: CD
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
350-701 practice, question 271. 654 questions available.
Version 1.0.0. How we source questions