Cisco Cisco Certifications 500-651 Questions & Answers

• Question 31:

  Which feature of AMP tracks the movement of a file within the environment and monitors its disposition over time?

  A. Trajectory

  B. Fuzzy Fingerprinting

  C. Machine Learning

  D. ThreatGrid

  Correct Answer: A

  ASAS Security Advanced Threats SE Module 6

• Question 32:

  Which are two main features of DDoS Attack Prevention? (Choose two)

  A. Block or allow traffic automatically

  B. Redirects DDoS traffic back to attacker

  C. Leveraging AMP ThreatGrid technology

  D. Stop attacks within seconds of detection

  Correct Answer: AD

• Question 33:

  Which feature of AnyConnect provides you the ability to identify data breaches as they happen?

  A. Flexible AAA Options

  B. Network Visibility Module

  C. Differentiated Mobile Access

  D. Trusted Network Detection

  Correct Answer: B

  ASAS Policy and Access SE Module 5

• Question 34:

  Which are three key features of DNS-layer security? (Choose three.)

  A. Data Loss Prevention

  B. Retrospective Analysis

  C. Real-time sandboxing

  D. Provides visibility into all Internet activity

  E. Acts as first level of protection by providing security at DNS layer

  F. Resolves all DNS request through a single recursive DNS service

  Correct Answer: DEF

• Question 35:

  What is a key difference between Basic Data Loss Prevention and Advanced Data Loss Prevention?

  A. Providing content analysis

  B. Instant visibility

  C. Dynamic outbreak considerations

  D. Ability to filter in real-time

  Correct Answer: C

• Question 36:

  Which are two key Cisco products that are part of the web threat-centric solution? (Choose two.)

  A. Cisco Defense Orchestrator

  B. Cisco Umbrella

  C. Cisco Identity Services Engine

  D. Cisco Web Security Appliance

  E. Cisco Email Security Appliance

  Correct Answer: BD

  ASAS Security Threat Centric Solutions - AM and SE Module 7

• Question 37:

  Which three Cisco solutions are covered in the Advanced Threat module? (Choose three.)

  A. Cognitive Threat Analytics

  B. Intrusion Analytics

  C. AMP

  D. Cisco Defense Orchestrator

  E. NGIPS

  F. Cisco ThreatGrid

  Correct Answer: ACF

  ASAS Security Advanced Threats SE Module 6

• Question 38:

  Which three options ate attack vectors protected by DNS-Layer security? (Choose three.)

  A. Voicemail

  B. Backups

  C. Web

  D. E-mail

  E. Cloud apps

  F. Video Surveil lance

  Correct Answer: CDE

  ASAS Security Threat Centric Solutions - AM and SE Module 7

• Question 39:

  Which feature of ISE combines user identification with robust context sharing platform to prevent inappropriate access?

  A. Centralized policy management

  B. Context-aware access

  C. Patch management

  D. Platform exchange grid

  Correct Answer: B

  ASAS Policy and Access SE Module 5

• Question 40:

  Employee-sponsored network access, guest access, and activity tracking are contributors to which feature of ISE?

  A. Device profiting

  B. Context-aware access

  C. Guest access management

  D. Platform exchange grid

  Correct Answer: C

  ASAS Policy and Access SE Module 5