Implementing and Operating Cisco Security Core Technologies (SCOR)654 questions across 66 pages are complete and free, with no account or card.
654 questions in this bank
Free access · progress saved on this device
Which statement about IOS zone-based firewalls is true?
Answer: D
Reference: https://www.cisco.com/c/en/us/support/docs/security/ios-firewall/98628-zone-design-guide.html
Source: Adapted from community discussion — sull3y
When wired 802.1X authentication is implemented, which two components are required? (Choose two.)
Answer: AC
Reference: https://www.lookingpoint.com/blog/ise-series-802.1x
Which SNMPv3 configuration must be used to support the strongest security possible?
Answer: D
D. asa-host(config)#snmp-server group myv3 v3 priv asa-host(config)#snmp-server user andy myv3 auth sha cisco priv aes 256 ciscXXXXXXXX asa-host(config)#snmp-server host inside 10.255.254.1 version 3 andy SNMPv3 offers three security levels: noAuthNoPriv, authNoPriv, and authPriv. The strongest security possible is achieved by using the authPriv security level. This level requires both an authentication and a privacy (encryption) protocol. Option D is using the authPriv security level, it uses the AES256 for encryption which is considered a stronger encryption algorithm than 3DES, and it uses the SHA for authentication which is considered a stronger authentication algorithm than MD5. It is important to note that the real configuration may vary depending on the device and the vendor.
Source: Adapted from community discussion — sull3y
Under which two circumstances is a CoA issued? (Choose two.)
Answer: BD
Reference: https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_prof_pol.html
Source: Adapted from community discussion — aadach
Which ASA deployment mode can provide separation of management on a shared appliance?
Answer: C
C. multiple context mode The Cisco ASA firewall supports several deployment modes, one of them is multiple context mode also known as Security Contexts mode. This mode allows for the separation of management on a shared appliance by creating multiple virtual firewalls, each with its own security policies, interfaces, and administrators. This allows for a more granular control of network access and security, as well as logical separation of different security zones on the same physical appliance. This deployment mode is typically used in large enterprises or service providers to provide secure multitenancy, segregating different customers or departments on the same device while keeping their security policies separate.
Source: Adapted from community discussion — sull3y
Refer to the exhibit. Which command was used to display this output?
Answer: A
Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_8021x/configuration/xe-3se/3850/sec-user-8021x-xe-3se-3850-book/config-ieee-802x- pba.html
Source: Adapted from community discussion — CiscoTech
Which flaw does an attacker leverage when exploiting SQL injection vulnerabilities?
Answer: A
This is a tricky question, and I believe the provided answer is correct and here is why. They ask what is the flaw that caused the attacker to exploit this vulnerability? I agree that the attacker uses the web application or the user input to exploit the vulnerability, and give commands to connect to the database and get everything needed about the database. But what where is the actual flaw? Was it A. the web application and the user input? No, it’s not, or it would be XSS vulnerability. The attacker leveraged a flaw in the Database, using the web application or the user input as a way to communicate with the Database and extract all the info about the database. With that being said, I believe that the provided answer is correct, and I will go with C.
Source: Adapted from community discussion — eazy99
What is a characteristic of Cisco ASA NetFlow v9 Secure Event Logging?
Answer: A
Reference: https://www.cisco.com/c/en/us/td/docs/security/asa/asa92/configuration/general/asa-general-cli/monitor-nsel.html
Source: Adapted from community discussion — sull3y
A network engineer has entered the snmp-server user andy myv3 auth sha cisco priv aes 256 cisc0383320506 command and needs to send SNMP information to a host at 10.255.254.1. Which command achieves this goal?
Answer: D
Configuration Example of SNMP v3 Currently the most secure SNMP version is v3. To configure this version you need first to create an SNMP group, then an SNMP server and lastly a host (NMS) which will communicate with the firewall for management purposes. Let’s configure SNMP v3 with the example below: ASA(config)# snmp-server enable ASA(config)# snmp-server group snmpgroup v3 auth <- create v3 group with authentication ASA(config)# snmp-server user administrator snmpgroup v3 auth sha strongpass <- create user “administrator” belonging to group “snmpgroup” ASA(config)#snmp-server host inside 10.1.1.1 version 3 administrator <- specify the NMS host Correct answer is D, administrator here is equal to andy
Source: Adapted from community discussion — Zoli6
An engineer wants to generate NetFlow records on traffic traversing the Cisco ASA. Which Cisco ASA command must be used?
Answer: C
"C" should be the correct answer. Add an NSEL collector to which NetFlow packets may be sent. flow-export destination interface-name ipv4-address | hostname udp-port Example: ciscoasa(config)# flow-export destination inside 209.165.200.225 2002 The destination keyword indicates that a NSEL collector is being configured. The interface-name argument is the name of the ASA and ASA Services Module interface through which the collector is reached. The ipv4-address argument is the IP address of the machine running the collector application. The hostname argument is the destination IP address or name of the collector. The udp-port argument is the UDP port number to which NetFlow packets are sent. You can configure a maximum of five collectors. After a collector is configured, template records are automatically sent to all configured NSEL collectors.
Source: Adapted from community discussion — surforlife
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
350-701 practice, question 621. 654 questions available.
Version 1.0.0. How we source questions