An engineer has enabled LDAP accept queries on a listener. Malicious actors must be prevented from quickly identifying all valid recipients. What must be done on the Cisco ESA to accomplish this goal?

• A.Use Bounce Verification
• B.Configure incoming content filters.
• C.Bypass LDAP access queries in the recipient access table.
• D.Configure Directory Harvest Attack Prevention

Correct Answer: D

Reference:

Comment: *

Name: *

Email: *

Verification: *

Which factor must be considered when choosing the on-premise solution over the cloud-based one?

• A.With an on-premise solution, the provider is responsible for the installation and maintenance of the product, whereas with a cloud-based solution, the customer is responsible for it
• B.With a cloud-based solution, the provider is responsible for the installation, but the customer is responsible for the maintenance of the product.
• C.With an on-premise solution, the provider is responsible for the installation, but the customer is responsible for the maintenance of the product.
• D.With an on-premise solution, the customer is responsible for the installation and maintenance of the

Comment: *

Name: *

Email: *

Verification: *

What does Cisco AMP for Endpoints use to help an organization detect different families of malware?

• A.Ethos Engine to perform fuzzy fingerprinting
• B.Tetra Engine to detect malware when me endpoint is connected to the cloud
• C.Clam AV Engine to perform email scanning
• D.Spero Engine with machine learning to perform dynamic analysis

Comment: *

Name: *

Email: *

Verification: *

Which two tasks allow NetFlow on a Cisco ASA 5500 Series firewall? (Choose two.)

• A.Define a NetFlow collector by using the flow-export command.
• B.Apply NetFlow Exporter to the outside interface in the inbound direction.
• C.Create an ACL to allow UDP traffic on port 9996.
• D.Create a class map to match interesting traffic.
• E.Enable NetFlow Version 9.

Comment: *

Name: *

Email: *

Verification: *

An engineer used a posture check on a Microsoft Windows endpoint and discovered that the MS17-010 patch was not installed, which left the endpoint vulnerable to WannaCry ransomware. Which two solutions mitigate the risk of this ransom ware infection? (Choose two)

• A.Configure a posture policy in Cisco Identity Services Engine to install the MS17-010 patch before allowing access on the network.
• B.Set up a profiling policy in Cisco Identity Service Engine to check and endpoint patch level before allowing access on the network.
• C.Configure a posture policy in Cisco Identity Services Engine to check that an endpoint patch level is met before allowing access on the network.
• D.Configure endpoint firewall policies to stop the exploit traffic from being allowed to run and replicate throughout the network.
• E.Set up a well-defined endpoint patching strategy to ensure that endpoints have critical vulnerabilities patched in a timely fashion.

Correct Answer: A,C

A posture policy is a collection of posture requirements, which are associated with one or more identity groups, and operating systems. We can configure ISE to check for the Windows patch at Work Centers > Posture > Posture Elements > Conditions > File.
In this example, we are going to use the predefined file check to ensure that our Windows 10 clients have the critical security patch installed to prevent the Wanna Cry malware.

Comment: *

Name: *

Email: *

Verification: *