Cisco Cisco Certifications 500-651 Questions & Answers

• Question 51:

  Which is a component of Cisco's Web and E-mail Security Solution?

  A. Device Profiling

  B. Next Generation Intrusion Prevention System

  C. Next Generation Firewall

  D. DNS-Layer security

  Correct Answer: D

  ASAS Security Web and Email SE Module 2

• Question 52:

  Which of AMP's File capabilities deals with the problem of files passing through perimeter defenses that are later discovered to be a threat?

  A. Dynamic Analytics

  B. Trajectory

  C. Malware Security

  D. File Retrospection

  Correct Answer: D

  Tracks the spread of any file within your network and continuously monitors file reputation over time. If a file reputation changes to malicious or is found by file sandboxing to be malicious, AMP provides retrospective alerting in the after phase. AMP identifies every instance of the file within your network to address the problem of malicious files passing through perimeter defenses that are later deemed a threat. Reference: https://www.cisco.com/c/en/us/td/docs/security/web_security/scancenter/administrator/guid e/ b_ScanCenter_Administrator_Guide/b_ScanCenter_Administrator_Guide_chapter_0111 01.pdf

• Question 53:

  Which three options are attack vectors protected by Email Security? (Choose three)

  A. Endpoints

  B. Offline Devices

  C. Mobile

  D. E-mail

  E. Voicemail

  F. Backups

  Correct Answer: ACD

  ASAS Security Web and Email SE Module 2

• Question 54:

  Which option helps customers gain insight into security threats?

  A. Limit volume of users to applications

  B. Share sensitive data across Afferent platforms

  C. Providing remote access VPN to allow mobile users to connect securely to customers network

  D. Providing visibility into everything to allow granular security policies to be created and enforced

  Correct Answer: D

• Question 55:

  Which AMP feature is provided by fuzzy fingerprinting?

  A. Identifies specific instances of malware with a signature-based approach

  B. Automatically detects polymorphic variants of known malware

  C. Provides recursive DNS lookup services

  D. Identifies new malware using statistical modeling and analytics engines

  Correct Answer: B

  ASAS Security Advanced Threats SE Module 6

• Question 56:

  Which Cisco Product is integrated with the AnyConnect Web Security Module?

  A. Cisco Stealthwatch

  B. Cisco Defense Orchestrator

  C. Cisco Cloud Web Security

  D. Cisco Email Security Appliance

  Correct Answer: C

  ASAS Policy and Access SE Module 5

• Question 57:

  Which are two main features of Stateful Firewalling? (Choose two.)

  A. Clientless lagging

  B. File retrospection

  C. Full VX LAN support

  D. File reputation

  Correct Answer: AC

  Explanation: ASAS Security NGFW and NGIPS SE Module 4

• Question 58:

  Which are three main features of the Meraki MX discussed in Cloud App Security module? (Choose three)

  A. Cloud-Brokered VPN

  B. Posture Assessment

  C. Intrusion Prevention

  D. Email Security

  E. Profiling

  F. Next Generation Firewall

  Correct Answer: CEF

• Question 59:

  Which are two main features of Intrusion Prevention? (Choose two.)

  A. Threat analysis through network behavior analysis

  B. Protecting against Zero-Day attacks

  C. Layer-4 traffic monitoring across platforms

  D. Vulnerability-based threat management

  Correct Answer: AD

• Question 60:

  Which three features provided by NGFW and NGIPS support the Internet Edge' use case? (Choose three.)

  A. Supports High Availability

  B. Support for profiling devices

  C. Supports dynamic routing protocols such as OSPF or BGP

  D. Support for Platform exchange grid

  E. Support for High Bandwith environments

  F. Support for integrated posture assessment

  Correct Answer: ACE