Implementing and Operating Cisco Security Core Technologies (SCOR)654 questions across 66 pages are complete and free, with no account or card.
654 questions in this bank
Free access · progress saved on this device
Which two tasks allow NetFlow on a Cisco ASA 5500 Series firewall? (Choose two.)
Answer: AB
A and B "Flow-export actions are not supported in interface-based policies. You can configure flow-export actions in a class-map only with the match access-list, match any, or class-default commands. You can only apply flow-export actions in a global service policy. "
Source: Adapted from community discussion — jmosilva
Refer to the exhibit. A network administrator configures command authorization for the admin5 user. What is the admin5 user able to do on HQ_Router after this configuration?
Answer: C
the answer is C because the below line is missing from privilege configuration and athe user will not be able to reache the interface config level: privilege exec level 5 configure terminal
Source: Adapted from community discussion — dansecu
A network engineer is configuring DMVPN and entered the crypto isakmp key cisc0383320506 address 0.0.0.0 command on host A. The tunnel is not being established to host B. What action is needed to authenticate the VPN?
Answer: C
For me the good answer is C. Enter 0.0.0.0 on a this command line could be done on Hub and Spoke. Hub configuration is done on ip nhrp. https://www.cisco.com/c/en/us/td/docs/ios/12_2/security/command/reference/srfike.html#wp1017897 https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_dmvpn/configuration/15-mt/sec-conn-dmvpn-15-mt-book/sec-conn-dmvpn-dmvpn.html#GUID-BDBD63D7-C9FD-490F-B1AF-EFC38B6B497B
Source: Adapted from community discussion — Laryoul
How many interfaces per bridge group does an ASA bridge group deployment support?
Answer: C
C is the correct answer for Cisco ASA up to version 9.4 (up to 4 interfaces per bridge group) https://www.cisco.com/c/en/us/td/docs/security/asa/asa94/config-guides/cli/general/asa-94-general-config/interface-routed-tfw.html With Cisco ASA version 9.6 the correct answer is up to 64 interfaces per bridge group !!! No such number there !!! https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/configuration/general/asa-96-general-config/interface-routed-tfw.html
Source: Adapted from community discussion — u777
A network administrator configures Dynamic ARP Inspection on a switch. After Dynamic ARP Inspection is applied, all users on that switch are unable to communicate with any destination. The network administrator checks the Interface status of all interfaces, and there is no err-disabled interface. What is causing this problem?
Answer: A
The correct answer should be A. DHCP Snooping has not been enabled on all VLANs. DHCP Snooping is a prerequisite for Dynamic ARP Inspection (DAI). When DHCP Snooping is enabled the 'no ip arp inspection trust' command only ensures that DAI will do its job, blocking invalid traffic.
Source: Adapted from community discussion — Jeeves69
What is a difference between FlexVPN and DMVPN?
Answer: B
B. FlexVPN uses IKEv2. DMVPN uses IKEv1 or IKEv2 FlexVPN is a Cisco VPN solution that simplifies the deployment of VPNs using a centralized VPN management model. It uses IKEv2 as the default key exchange protocol to provide secure and flexible VPN connections. FlexVPN is supported on Cisco IOS XE and Cisco IOS software platforms. DMVPN (Dynamic Multipoint Virtual Private Network) is a Cisco VPN solution that enables the creation of VPNs with dynamic spoke-to-spoke connections. It uses IKEv1 or IKEv2 as the key exchange protocol to provide secure VPN connections. DMVPN is supported on Cisco IOS, Cisco IOS XE and Cisco IOS XR software platforms.
Source: Adapted from community discussion — sull3y
DRAG DROP - Drag and drop the capabilities of Cisco Firepower versus Cisco AMP from the left into the appropriate category on the right. Select and Place:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
What is the difference between deceptive phishing and spear phishing?
Answer: B
Nope, the answer should be B. You can easily google it, and you can find that Spear phishing relates to attacks targeted to individuals. Spear phishing always focuses on one victim
Source: Adapted from community discussion — fabio3wz
An engineer needs behavioral analysis to detect malicious activity on the hosts, and is configuring the organization's public cloud to send telemetry using the cloud provider's mechanisms to a security device. Which mechanism should the engineer configure to accomplish this goal?
Answer: D
It's B From the book SCOR 350-701: Stealthwatch Cloud is a Software as a Service (SaaS) cloud solution. You can use Stealthwatch Cloud to monitor many different public cloud environments, such as Amazon’s AWS, Google Cloud Platform, and Microsoft Azure. All of these cloud providers support their own implementation of NetFlow: ■■ In Amazon AWS, the equivalent of NetFlow is called VPC Flow Logs. You can obtain detailed information about VPC Flow Logs in AWS at https://docs.aws.amazon.com/ vpc/latest/userguide/flow-logs.html. ■■ Google Cloud Platform also supports VPC Flow Logs (or Google-branded GPC Flow Logs). You can obtain detailed information about VPC Flow Logs in Google Cloud Platform at https://cloud.google.com/vpc/docs/using-flow-logs. ■■ In Microsoft’s Azure, traffic flows are collected in Network Security Group (NSG) flow logs. NSG flow logs are a feature of Network Watcher. You can obtain additional information about Azure’s NSG flow logs and Network Watcher at https://docs.microsoft. com/en-us/azure/network-watcher/network-watcher-nsg-flow-logging-overview
Source: Adapted from community discussion — VI_Vershinin
An engineer is trying to securely connect to a router and wants to prevent insecure algorithms from being used. However, the connection is failing. Which action should be taken to accomplish this goal?
Answer: A
scenario: enabling ssh,setting ssh version to 2 and configuring vty lines to support only ssh connections (config)#hostname FUNTECH-ROUTER #ip domain name FUNTECH.com #crypto key generate rsa (choose key length of your choice after entering this command) #ip ssh version 2 #line vty 0 4 #transport input ssh #password cisco #exit ....of all the provided answers A would make sense
Source: Adapted from community discussion — gondohwe
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
350-701 practice, question 631. 654 questions available.
Version 1.0.0. How we source questions