How does Cisco Advanced Phishing Protection protect users?

• A.It validates the sender by using DKIM.
• B.It determines which identities are perceived by the sender
• C.It uses machine learning and real-time behavior analytics.
• D.It utilizes sensors that send messages securely.

Correct Answer: C

https://www.cisco.com/c/dam/en/us/products/collateral/security/cloud-email-security/at-a-glance-c45-740894.pdf

Comment: *

Name: *

Email: *

Verification: *

What is a benefit of using telemetry over SNMP to configure new routers for monitoring purposes?

• A.Telemetry uses push and pull, which makes it more scalable than SNMP
• B.Telemetry uses a pull, method which makes it more reliable than SNMP
• C.Telemetry uses push and pull which makes it more secure than SNMP
• D.Telemetry uses a push method which makes it faster than SNMP

Comment: *

Name: *

Email: *

Verification: *

When choosing an algorithm to us, what should be considered about Diffie Hellman and RSA for key establishment?

• A.RSA is an asymmetric key establishment algorithm intended to output symmetric keys
• B.RSA is a symmetric key establishment algorithm intended to output asymmetric keys
• C.DH is a symmetric key establishment algorithm intended to output asymmetric keys
• D.DH is on asymmetric key establishment algorithm intended to output symmetric keys

Comment: *

Name: *

Email: *

Verification: *

A network engineer is configuring DMVPN and entered the crypto isakmp key cisc0380739941 address 0.0.0.0 command on host A.
The tunnel is not being established to hostB. What action is needed to authenticate the VPN?

• A.Change the password on hostA to the default password.
• B.Enter the command with a different password on hostB.
• C.Change isakmp to ikev2 in the command on hostA.
• D.Enter the same command on hostB.

Comment: *

Name: *

Email: *

Verification: *

A Cisco FTD engineer is creating a new IKEv2 policy called s2s00123456789 for their organization to allow for additional protocols to terminate network devices with. They currently only have one policy established and need the new policy to be a backup in case some devices cannot support the stronger algorithms listed in the primary policy. What should be done in order to support this?

• A.Change the integrity algorithms to SHA* to support all SHA algorithms in the primary policy
• B.Make the priority for the new policy 5 and the primary policy 1
• C.Change the encryption to AES* to support all AES algorithms in the primary policy
• D.Make the priority for the primary policy 10 and the new policy 1

Comment: *

Name: *

Email: *

Verification: *