Cisco Cisco Certifications 500-651 Questions & Answers

• Question 61:

  Which feature in the DNS security module provide on and off network DNS protection?

  A. Umbrella

  B. Layer-4 monitoring

  C. Real-time sandboxing

  D. Data Loss Prevention

  Correct Answer: A

• Question 62:

  What are three benefits that Cisco Umbrella brings to DNS-Layer Security? (Choose three.)

  A. Helps provide breach mitigation

  B. Blocks Domains/IPs associated with malware, phising, etc

  C. Delivers cloud based recursive DNS

  D. Provides profiling of devices

  E. Logs all internet activity

  F. Provides Sandboxing of malware

  Correct Answer: BCE

  ASAS Security Web and Email SE Module 2

• Question 63:

  What feature of Anti-Spam Defense determines the reputation of an e-mail?

  A. IP addresses

  B. Threat analysis

  C. Context analysis

  D. Encryption score

  Correct Answer: C

• Question 64:

  What are three main challenges addressed by Cisco's cloud delivered security solutions? (Choose three.)

  A. Threats are becoming too advanced tor traditional hardware

  B. Solutions often require frequent hardware updates

  C. Employees are unable to work remotely

  D. Businesses are using email too frequently

  E. Frequently installing new servers, appliances, and devices adds to the maintenance workload

  F. IT staff must continuously grow with additional specializations to address the solutions

  Correct Answer: BEF

  ASAS Cisco Cloud Security SE - Module 3

• Question 65:

  Which is a key feature of Cisco Defense Orchestrator?

  A. Simplifies security policy management

  B. Identifies sensitive data in cloud environments

  C. Detects anomalous traffic on customer's network

  D. Provides retrospective security

  Correct Answer: A

  ASAS Cisco Cloud Security SE - Module 3

• Question 66:

  How is Cisco Security able to dynamically add IP addresses of known malware domains to its list of ports to detect and block?

  A. Reputation Filtering

  B. Layer-4 Monitoring

  C. Data Loss Prevention

  D. URL Filtering

  Correct Answer: B

  ASAS Security Web and Email SE Module 2

• Question 67:

  Which two products are part of Cisco's Data Center threat-centric solution? (Choose two.)

  A. Rapid threat detection through NGFW and NGFWv

  B. Enforced device security with Meraki

  C. URL filtering

  D. Relationship segmentation

  E. Automated policy enforcement with ASAv

  Correct Answer: AE

  ASAS Security Threat Centric Solutions - AM and SE Module 7

• Question 68:

  Which three are deployment options for E-mail Security? (Choose three.)

  A. ESA

  B. CES

  C. WSAv

  D. AMP

  E. ESAv

  F. WebRoot

  Correct Answer: ABE

• Question 69:

  Which are two key Cisco benefits of the web threat-centric solution? (Choose two.)

  A. Data Loss Prevention with NGFW

  B. Endpoint device profiling with ISE

  C. E-mail encryption with CRES

  D. Malware blocking with AMP

  E. Rogue web application protection through CTA

  Correct Answer: DE

  ASAS Security Threat Centric Solutions - AM and SE Module 7

• Question 70:

  Which product was covered in the Cisco Cloud App Security module?

  A. Cisco NGFW

  B. Cisco Defense Orchestrator

  C. Cisco AMP

  D. Cloud Cloudlock

  Correct Answer: D