Implementing and Operating Cisco Security Core Technologies (SCOR)654 questions across 66 pages are complete and free, with no account or card.
654 questions in this bank
Free access · progress saved on this device
What is a commonality between DMVPN and FlexVPN technologies?
Answer: C
Reference: https://packetpushers.net/cisco-flexvpn-dmvpn-high-level-design/#:~:text=In%20its%20essence%2C%20FlexVPN%20is,both%20are%20Cisco's% 20proprietary%20technologies .
Source: Adapted from community discussion — thefiresays
Refer to the exhibit. All servers are in the same VLAN/Subnet DNS Server-1 and DNS Server-2 must communicate with each other and all servers must communicate with default gateway multilayer switch. Which type of private VLAN ports should be configured to prevent communication between DNS servers and the file server?
Answer: D
Promiscuous : All are welcome to the party ( default gw) Isolated : Don't communicate with anyone, except Promiscuous Community : Communicate with only with friends in Community squad and Promiscuous
Source: Adapted from community discussion — c946f3e
Refer to the exhibit. Which configuration item makes it possible to have the AAA session on the network?
Answer: B
I'd go with B: aaa authentication enable default enable ---> This only authentificates for enable access B. aaa authorization network default group ise ----> This authorizes policy based on successful authentification C. aaa authentication login console ise ---> Authentification for console port ( has no impact on users D. aaa authorization exec default ise ----> Authorization for exec ( has no impact on users)
Source: Adapted from community discussion — Initial14
Which method of attack is used by a hacker to send malicious code through a web application to an unsuspecting user to request that the victim's web browser executes the code?
Answer: A
Reference: https://owasp.org/www-community/attacks/xss/
Which two solutions help combat social engineering and phishing at the endpoint level? (Choose two.)
Answer: BD
The two solutions that help combat social engineering and phishing at the endpoint level are: B. Cisco Duo Security: Cisco Duo Security is a multi-factor authentication solution that provides a second layer of security to the login process, which helps prevent social engineering attacks that steal user credentials. D. Cisco Umbrella: Cisco Umbrella is a cloud-based security platform that provides DNS and web filtering security services. It can help prevent phishing attacks by blocking access to malicious domains and IP addresses.
Source: Adapted from community discussion — sull3y
An engineer is implementing Cisco CES in an existing Microsoft Office 365 environment and must route inbound email to Cisco CES addresses. Which DNS record must be modified to accomplish this task?
Answer: C
A large organization wants to deploy a security appliance in the public cloud to form a site-to-site VPN and link the public cloud environment to the private cloud in the headquarters data center. Which Cisco security appliance meets these requirements?
Answer: D
Refer to the exhibit. What are two indications of the Cisco Firepower Services Module configuration? (Choose two.)
Answer: AE
I would go with A and E sfr {fail-open | fail-close [monitor-only]} <- There's a couple different options here. The first one is fail-open which means that if the Firepower software module is unavailable, the ASA will continue to forward traffic. fail-close means that if the Firepower module fails, the traffic will stop flowing. While this doesn't seem ideal, there might be a use case for it when securing highly regulated environments. The monitor-only switch can be used with both and basically puts the Firepower services into IDS-mode only. This might be useful for initial testing or setup.
Source: Adapted from community discussion — leowulf
Which two parameters are used to prevent a data breach in the cloud? (Choose two.)
Answer: AE
A. DLP solutions and E. Encryption To prevent a data breach in the cloud, the following parameters can be used: 1. DLP solutions: Data Loss Prevention (DLP) solutions can be used to monitor and control the flow of sensitive data in the cloud. DLP solutions can detect and prevent data breaches by identifying and blocking unauthorized access to sensitive data. 2. Encryption: Encryption can be used to protect data in transit and at rest in the cloud. Encryption ensures that data is unreadable to unauthorized users even if it is intercepted or stolen. Complex cloud-based web proxies, strong user authentication, and antispoofing programs are important security measures, but they are not specifically used to prevent data breaches in the cloud.
Source: Adapted from community discussion — tabimatsu
What is the concept of continuous integration/continuous delivery pipelining?
Answer: A
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
350-701 practice, question 281. 654 questions available.
Version 1.0.0. How we source questions