Implementing and Operating Cisco Security Core Technologies (SCOR)654 questions across 66 pages are complete and free, with no account or card.
654 questions in this bank
Free access · progress saved on this device
When network telemetry is implemented, what is important to be enabled across all network infrastructure devices to correlate different sources?
Answer: C
yes what is how to correlate not how to provision. How can you even correlate events in syslog if you dont have a NTP server configured? There would be no correct timestamp for the events
Source: Adapted from community discussion — Badrach
Which Cisco ASA deployment model is used to filter traffic between hosts in the same IP subnet using higher-level protocols without readdressing the network?
Answer: D
Reference: https://grumpy-networkers-journal.readthedocs.io/en/latest/VENDOR/CISCO/FIREWALL/ASA/TRANSPARENTFW.html
Source: Adapted from community discussion — eafea4f
When Cisco and other industry organizations publish and inform users of known security findings and vulnerabilities, which name is used?
Answer: B
B:When Cisco and other industry organizations publish and inform users of known security findings and vulnerabilities, the name used is B. Common Vulnerabilities and Exposures (CVE). CVE is a standardized naming convention used to identify and track publicly disclosed cybersecurity vulnerabilities and exposures. It provides a unique identifier for each vulnerability and is used by organizations to reference and communicate about specific vulnerabilities.
Source: Adapted from community discussion — sull3y
When NetFlow is applied to an interface, which component creates the flow monitor cache that is used to collect traffic based on the key and nonkey fields in the configured record?
Answer: D
Link: https://www.routexp.com/2019/11/introduction-to-flexible-netflow.html Flow monitors are the Flexible NetFlow component that is applied to interfaces to perform network traffic monitoring. Flow monitors consist of a record and a cache. You add the record to the flow monitor after you create the flow monitor. The flow monitor cache is automatically created at the time the flow monitor is applied to the first interface. Flow data is collected from the network traffic during the monitoring process based on the key and nonkey fields in the record, which is configured for the flow monitor and stored in the flow monitor cache.
Source: Adapted from community discussion — Ahmedoooooo
What is the term for when an endpoint is associated to a provisioning WLAN that is shared with guest access, and the same guest portal is used as the BYOD portal?
Answer: B
https://community.cisco.com/t5/security-knowledge-base/ise-byod-dual-vs-single-ssid-onboarding/ta-p/3641422#:~:text=If%20guest%20access%20is%20utilizing%20one%20of%20the,WLAN%20which%20is%20typically%20shared%20with%20guest%20access. ...This flow is called Dual-SSID BYOD, where the endpoint is associated to a provisioning WLAN which is typically shared with guest access....
Source: Adapted from community discussion — Jessie45785
DRAG DROP - Drag and drop the exploits from the left onto the type of security vulnerability on the right. Select and Place:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
Which Cisco ASA Platform mode disables the threat detection features except for Advanced Threat Statistics?
Answer: B
https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/configuration/general/asa-96-general-config/ha-contexts.html Unsupported Features Multiple context mode does not support the following features: RIP OSPFv3. (OSPFv2 is supported.) Multicast routing Threat Detection Unified Communications QoS Static route tracking
Source: Adapted from community discussion — Jessie45785
Which type of attack is MFA an effective deterrent for?
Answer: B
An engineer is configuring web filtering for a network using Cisco Umbrella Secure Internet Gateway. The requirement is that all traffic needs to be filtered. Using the SSL decryption feature, which type of certificate should be presented to the end-user to accomplish this goal?
Answer: B
When using SSL decryption in Cisco Umbrella Secure Internet Gateway to filter all traffic, a self-signed certificate should be presented to the end-user. SSL decryption is a feature that allows the firewall to inspect encrypted traffic by decrypting it and then re-encrypting it with a new certificate. To avoid generating trust errors in the end-user's web browser, a new certificate must be presented to the user that matches the hostname of the website being accessed. A self-signed certificate is a digital certificate that is not signed by a trusted third-party certificate authority (CA). Instead, it is generated and signed by the organization itself. While not as trusted as a certificate signed by a third-party CA, a self-signed certificate can be used for SSL decryption as long as it is installed on all client devices that will be accessing the network.
Source: Adapted from community discussion — sull3y
An engineer needs to configure an access control policy rule to always send traffic for inspection without using the default action. Which action should be configured for this rule?
Answer: C
ALLOW ? This option will always send traffic for inspection Rule 4: Allow is the final rule. For this rule, matching traffic is allowed; however, prohibited files, malware, intrusions, and exploits within that traffic are detected and blocked. Remaining non-prohibited, non-malicious traffic is allowed to its destination, though it is still subject to identity requirements and rate limiting. You can configure Allow rules that perform only file inspection, or only intrusion inspection, or neither. https://www.cisco.com/c/en/us/td/docs/security/firepower/610/configuration/guide/fpmc-config-guide-v61/access_control_rules.html
Source: Adapted from community discussion — Initial14
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
350-701 practice, question 311. 654 questions available.
Version 1.0.0. How we source questions