Question 291 · 654 in bank
Which security solution uses NetFlow to provide visibility across the network, data center, branch offices, and cloud?
Show answer
Answer: A
Implementing and Operating Cisco Security Core Technologies (SCOR)654 questions across 66 pages are complete and free, with no account or card.
654 questions in this bank
Free access · progress saved on this device
Which security solution uses NetFlow to provide visibility across the network, data center, branch offices, and cloud?
Answer: A
Which protocol provides the strongest throughput performance when using Cisco AnyConnect VPN?
Answer: A
A. DTLSv1 (Datagram Transport Layer Security version 1) provides the strongest throughput performance when using Cisco AnyConnect VPN. According to the Cisco document, DTLS (Datagram Transport Layer Security) is the default protocol used by the Cisco AnyConnect VPN Client for SSL connections, it can provide a better throughput performance compared to TLS (Transport Layer Security). DTLS uses UDP as the transport protocol, and it is designed for use in situations where the underlying transport protocol is unreliable, this allows DTLS to be more efficient than TCP-based TLS, especially in situations where network conditions are less than ideal. DTLS is a variation of the TLS protocol that is optimized for use over unreliable networks and is implemented on top of the User Datagram Protocol (UDP) to provide a more efficient and faster data transfer. It provides similar security to TLS and it is used by Cisco AnyConnect VPN client to secure communications between the VPN client and the VPN server.
Source: Adapted from community discussion — sull3y
Which two functions does the Cisco Advanced Phishing Protection solution perform in trying to protect from phishing attacks? (Choose two.)
Answer: BC
https://www.cisco.com/c/en/us/td/docs/security/ces/user_guide/esa_user_guide_13-5/b_ESA_Admin_Guide_ces_13-5/m_advanced_phishing_protection.pdf After the analysis, potentially malicious messages are remediated from the recipient mailbox automatically, based on the pre-configured policies on the AdvancedPhishingProtection cloud service Set up the email gateway as a sensor engine on the Cisco Advanced Phishing Protection cloud service. This deploys the email gateway as a lightweight sensor via the cloud or on-premise.
Source: Adapted from community discussion — Jessie45785
Which technology provides the benefit of Layer 3 through Layer 7 innovative deep packet inspection, enabling the platform to identify and output various applications within the network traffic flows?
Answer: C
C. Cisco NBAR2. Cisco NBAR2 (Network-Based Application Recognition) is a classification engine that provides advanced application recognition capabilities. It performs deep packet inspection on network traffic, allowing it to identify and classify applications running on the network. It can identify applications based on their port, protocol, and payload, providing Layer 3 through Layer 7 visibility into network traffic flows.
Source: Adapted from community discussion — sull3y
Which Cisco DNA Center Intent API action is used to retrieve the number of devices known to a DNA Center?
Answer: A
Which function is performed by certificate authorities but is a limitation of registration authorities?
Answer: A
Interesting question lol.... A & C are the best possible answers here..... CRL Publishing is primarily a CA's responsibility. An RA CAN also handle revocation requests, but this function is LIMITED to an administrative task rather than a core responsibility. Regarding user identity verification, a CA authenticates the identities of entities requesting digital certificates, ensuring that they possess the private key corresponding to the public key issued in the digital certificate. An RA is LIMITED in the fact that they do not perform full identity verification themselves, but rather assist in verifying the identity of the entity requesting the certificate. Which answer is the BEST? I would vote for C. My reason is because in this particular instance, an RA just do not possess the authority or capability to fully verify user identities.
Source: Adapted from community discussion — Tthurston1
A hacker initiated a social engineering attack and stole username and passwords of some users within a company. Which product should be used as a solution to this problem?
Answer: A
An organization must add new firewalls to its infrastructure and wants to use Cisco ASA or Cisco FTD. The chosen firewalls must provide methods of blocking traffic that include offering the user the option to bypass the block for certain sites after displaying a warning page and to reset the connection. Which solution should the organization choose?
Answer: A
An email administrator is setting up a new Cisco ESA. The administrator wants to enable the blocking of greymail for the end user. Which feature must the administrator enable first?
Answer: A
The Intelligent Multi-Scan feature enhances the scanning capabilities of the Cisco ESA by utilizing multiple AV engines and advanced analysis techniques to identify and block various types of threats - including malware, viruses, and phishing emails. While it may help in detecting and blocking graymail to an extent, it's not specifically designed for that purpose. To effectively block graymail, which typically involves emails from sources with poor reputation scores but may not necessarily contain malware or other malicious content, enabling the IP Reputation Filtering feature would be more suitable. IP Reputation Filtering helps to identify and block emails from sources with known poor reputations - which often includes sources associated with graymail. https://www.cisco.com/c/en/us/td/docs/security/esa/esa15-0/user_guide/b_ESA_Admin_Guide_15-0/b_ESA_Admin_Guide_12_1_chapter_0101.html Read the section "How Sender IP Reputation Filters Works"
Source: Adapted from community discussion — Tthurston1
Which technology enables integration between Cisco ISE and other platforms to gather and share network and vulnerability data and SIEM and location information?
Answer: C
Cisco ISE uses Cisco Platform Exchange Grid (pxGrid) technology to share contextual data with leading SIEM and TD partner solutions.
Source: Adapted from community discussion — leowulf
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
350-701 practice, question 291. 654 questions available.
Version 1.0.0. How we source questions