Which two aspects of the cloud PaaS model are managed by the customer but not the provider? (Choose two.)

• A.virtualization
• B.middleware
• C.operating systems
• D.applications
• E.data

Comment: *

Name: *

Email: *

Verification: *

What is the function of Cisco Cloudlock for data security?

• A.controls malicious cloud apps
• B.user and entity behavior analytics
• C.detects anomalies
• D.data loss prevention

Comment: *

Name: *

Email: *

Verification: *

Which metric is used by the monitoring agent to collect and output packet loss and jitter information?

• A.OTCP performance
• B.RTP performance
• C.WSAv performance
• D.AVC performance

Comment: *

Name: *

Email: *

Verification: *

An engineer used a posture check on a Microsoft Windows endpoint and discovered that the MS17-010 patch was not installed, which left the endpoint vulnerable to WannaCry ransomware. Which two solutions mitigate the risk of this ransom ware infection? (Choose two)

• A.Configure a posture policy in Cisco Identity Services Engine to install the MS17-010 patch before allowing access on the network.
• B.Set up a profiling policy in Cisco Identity Service Engine to check and endpoint patch level before allowing access on the network.
• C.Configure a posture policy in Cisco Identity Services Engine to check that an endpoint patch level is met before allowing access on the network.
• D.Configure endpoint firewall policies to stop the exploit traffic from being allowed to run and replicate throughout the network.
• E.Set up a well-defined endpoint patching strategy to ensure that endpoints have critical vulnerabilities patched in a timely fashion.

Correct Answer: A,C

A posture policy is a collection of posture requirements, which are associated with one or more identity groups, and operating systems. We can configure ISE to check for the Windows patch at Work Centers > Posture > Posture Elements > Conditions > File.
In this example, we are going to use the predefined file check to ensure that our Windows 10 clients have the critical security patch installed to prevent the Wanna Cry malware.

Comment: *

Name: *

Email: *

Verification: *

Why is it important to patch endpoints consistently?

• A.Patching helps to mitigate vulnerabilities.
• B.Patching reduces the attack surface of the infrastructure.
• C.Patching allows for creating a honeypot.
• D.Patching is required per the vendor contract.

Comment: *

Name: *

Email: *

Verification: *