CCNA Brain Dumps

Question No. 1

Which two statements about Cisco ESA clusters are true? (Choose two.)

• A. A cluster must contain exactly one group.
• B. A cluster can contain multiple groups.
• C. Clusters are implemented in a client/server relationship.
• D. The cluster configuration must be managed by the cluster administrator.
• E. The cluster configuration can be created and managed through either the GUI or the CLI.

Question No. 2

Which two types of software can be installed on a FP-9300 appliance? (Choose two.)

• A. Cisco Firepower Appliance
• B. Cisco ASA
• C. Cisco Firepower Management Center
• D. Cisco Firepower Service
• E. Cisco Firepower Threat Defense

Question No. 3

When creating an SSL policy on Cisco FirePOWER, which three options do you have

• A. do not decrypt
• B. trust
• C. allow
• D. block with reset
• E. block
• F. encrypt

Question No. 4

What is the default IP range of the external zone?

• A. 0.0.0.0 0.0.0.0
• B. 0.0.0.0 – 255.255.255.255
• C. 0.0.0.0/8
• D. The network of the management interface

Question No. 5

What is a value that Cisco ESA can use for tracing mail flow?

• A. the FQDN of the source IP address
• B. the FQDN of the destination IP address
• C. the destination IP address
• D. the source IP address

Question No. 6

The helpdesk was asked to provide a record of delivery for an important email message that a customer claims it did not receive. Which feature of the Cisco Email Security Appliance provides this record?

• A. Outgoing Mail Reports
• B. SMTP Routes
• C. Message Tracking
• D. Scheduled Reports
• E. System Administration

Question No. 7

Refer to exhibit.

Which configuration blow would result in this output of the show service-policy sfr command?

• A. policy-map global_policy
• B. Policy-map global_policy
• C. policy-map global_policy
• D. policy-map global_policy

Question No. 8

When does the Cisco ASA send traffic to the Cisco ASA IPS module for analysis?

• A. before firewall policy are applied
• B. after outgoing VPN traffic is encrypted
• C. after firewall policies are applied
• D. before incoming VPN traffic is decrypted.

Question No. 9

Which option is the main function of the Cisco CWS Connector on mobile devices?

• A. it provides a connection to the FireAMP cloud to block threats that other security layers fail to detect.
• B. it integrates with the Cisco AnyConnect Secure Mobility Client to provide web security.
• C. it integrates with the Cisco NAC Agent to collect web-browser history for reporting purposes.
• D. it integrates with the Cisco Firepower Management Console to manage application and web traffic.

Question No. 10

Which feature requires the network discovery policy for it to work on the Cisco Next Generate fusion Prevent-on System,

• A. impact flags
• B. URL filtering
• C. security intelligence
• D. health monitoring

Question No. 11

Which cloud-based malware detection engine uses machine-learning detection techniques in the Cisco Advanced Malware Protection cloud?

• A. third-party detections
• B. Spero
• C. Ethos
• D. Memcache

Question No. 12

Which three zones are used for anomaly detection? (Choose three.)

• A. Internal zone
• B. External zone
• C. Illegal zone
• D. Inside zone
• E. Outside zone
• F. DMZ zone

Question No. 13

Which IPS signature engine inspects the IP protocol packets and the Layer TCP?

• A. String TCP
• B. Atomic TCP
• C. Service HTTP
• D. Atomic IP

Question No. 14

Which command is used to enable strong ciphers on the Cisco Web Security Appliance?

• A. interfaceconfig
• B. strictssl
• C. etherconfig
• D. adminaccessconfig