Implementing and Operating Cisco Security Core Technologies (SCOR)654 questions across 66 pages are complete and free, with no account or card.
654 questions in this bank
Free access · progress saved on this device
An engineer is configuring guest WLAN access using Cisco ISE and the Cisco WLC. Which action temporarily gives guest endpoints access dynamically while maintaining visibility into who or what connecting?
Answer: A
An engineer needs to configure cloud logging on Cisco ASA with SAL integration. Which parameter must be considered for this configuration?
Answer: C
The answer is C https://docs.defenseorchestrator.com/c_implementing-cisco-security-analytics-and-logging-saas-for-asa-devices.html Be sure to review "Before you Begin" above to make sure your environment is properly configured. Onboard ASA Device to CDO using username and password. Send ASA Syslog Events to the Cisco Cloud. Configuring NSEL for ASA Devices Using a CDO Macro. Confirm events are visible in CDO. From the navigation bar, select Monitoring > Event Logging. Click the Live tab to view live events. If you have a Firewall Analytics and Monitoring or Total Network Analytics and Monitoring license, continue with the next section, Analyzing Events with Cisco Secure Cloud Analytics.
Source: Adapted from community discussion — luismg
A network administrator has installed Secure Endpoint in the network. During setup it was noticed an endpoint has been exhibiting unusual behavior, including slow performance and unexpected network activity. Administrator discovers a suspicious file named abc0467145535.exe running in the background. Which step must the network administrator take to investigate and remediate the potential malware?
Answer: A
What are two targets in cross-site scripting attacks? (Choose two.)
Answer: BC
As well as I understand, the targets are the cookie or a user input. This is what a hacker aims to get. The methods (to get the cookie or input) can be modifying the image type input, or modifying the header of an http request.
Source: Adapted from community discussion — Premium_Pils
Which component performs the resolution between the tunnel address and mGRE address in DMVPN?
Answer: C
Which action adds IOCs to customize detections for a new attack?
Answer: C
Indicators of Compromise (IOCs) are used in cybersecurity to detect and respond to potential threats by identifying malicious behaviors, files, or network activity. In Cisco Secure Endpoint, IOCs can be manually added to improve threat detection for new or evolving attacks. 🔹 Why is Option C Correct? Cisco Secure Endpoint allows administrators to define custom advanced detections based on specific IOCs (e.g., file hashes, IPs, domains, behaviors). This customization enhances malware detection and response by including new threats that may not yet be covered by Cisco’s global intelligence.
Source: Adapted from community discussion — madboy2
A network administrator received a critical message alert from a Cisco Secure Web Appliance stating that the log partition is at 107% capacity. How does a Cisco Secure Web Appliance respond when its logging partition is full?
Answer: B
What is the difference between a vulnerability and an exploit?
Answer: A
The correct answer is A. A vulnerability is a weakness or flaw in a system, software, or network that can be exploited by an attacker to compromise the security or functionality of the system. A vulnerability can be caused by a variety of factors, including coding errors, misconfigurations, or design flaws. An exploit, on the other hand, is a tool or technique used by an attacker to take advantage of a vulnerability and gain unauthorized access or control over the target system. An exploit can be a piece of software, a script, or a command that leverages a vulnerability to execute malicious code or actions on the target system. Therefore, the difference between a vulnerability and an exploit is that a vulnerability is a weakness that can be exploited by an attacker, while an exploit is the means by which an attacker takes advantage of a vulnerability to compromise the system.
Source: Adapted from community discussion — Naderelmansi
What limits communication between applications or containers on the same node?
Answer: D
How do the features of DMVPN compare to IPsec VPN?
Answer: A
An answer without a valid reference or a good argument is just blind guessing, and does not help anyone to get that ccnp!
Source: Adapted from community discussion — Premium_Pils
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
350-701 practice, question 551. 654 questions available.
Version 1.0.0. How we source questions