Drag and drop the descriptions from the left onto the correct protocol versions on the right.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *

Which two application layer preprocessors are used by Firepower Next Generation Intrusion Prevention System? (Choose two.)

• A.SIP
• B.inline normalization
• C.SSL
• D.packet decoder
• E.modbus

Comment: *

Name: *

Email: *

Verification: *

How is DNS tunneling used to exfiltrate data out of a corporate network?

• A.It redirects DNS requests to a malicious server used to steal user credentials, which allows further damage and theft on the network.
• B.lt encodes the payload with random characters that are broken into short strings and the DNS server rebuilds the exfiltrated data.
• C.It corrupts DNS servers by replacing the actual IP address with a rogue address to collect information or start other attacks.
• D.It leverages the DNS server by permitting recursive lookups to spread the attack to other DNS servers.

Comment: *

Name: *

Email: *

Verification: *

When planning a VPN deployment, for which reason does an engineer opt for an active/active FlexVPN configuration as opposed to DMVPN?

• A.Traffic is distributed statically by default.
• B.Floating static routes are required.
• C.Multiple routers or VRFs are required.
• D.HSRP is used for fallover.

Comment: *

Name: *

Email: *

Verification: *

A Cisco ISE engineer configures Central Web Authentication (CWA) for wireless guest access and must have the guest endpoints redirect to the guest portal for authentication and authorization. While testing the policy, the engineer notices that the device is not redirected and instead gets full guest access. What must be done for the redirect to work?

• A.Add the DACL name for the Airespace ACL configured on the WLC in the Common Tasks section of the authorization profile for the authorization policy line that the unauthenticated devices hit.
• B.Use the track movement option within the authorization profile for the authorization policy line that the unauthenticated devices hit.
• C.Create an advanced attribute setting of Cisco:cisco-gateway-id=guest within the authorization profile for the authorization policy line that the unauthenticated devices hit.
• D.Tag the guest portal in the CWA part of the Common Tasks section of the authorization profile for the authorization policy line that the unauthenticated devices hit.

Comment: *

Name: *

Email: *

Verification: *