An administrator configures new authorization policies within Cisco ISE and has difficulty profiling the devices. Attributes for the new Cisco IP phones that are profiled based on the RADIUS authentication are seen however the attributes for CDP or DHCP are not. What should the administrator do to address this issue?

• A.Configure the ip dhcp snooping trust command on the DHCP interfaces to get the information to Cisco ISE
• B.Configure the authentication port-control auto feature within Cisco ISE to identify the devices that are trying to connect
• C.Configure a service template within the switch to standardize the port configurations so that the correct information is sent to Cisco ISE
• D.Configure the device sensor feature within the switch to send the appropriate protocol information

Comment: *

Name: *

Email: *

Verification: *

An engineer is configuring Cisco Secure Endpoint to enhance security by preventing the execution of certain files by users. The engineer needs to ensure that the specific executable file name Cisco_Software_0505446151.exe is blocked from running while never being quarantined. What must the engineer configure to meet the requirement?

• A.Configure application control blocked applications list.
• B.Implement simple custom detection list.
• C.Create advanced custom detection list.
• D.Enable scheduled scans to detect and block the executable files.

Comment: *

Name: *

Email: *

Verification: *

A network administrator needs to find out what assets currently exist on the network. Third-party systems need to be able to feed host data into Cisco Firepower. What must be configured to accomplish this?

• A.a Network Discovery policy to receive data from the host
• B.a Threat Intelligence policy to download the data from the host
• C.a File Analysis policy to send file data into Cisco Firepower
• D.a Network Analysis policy to receive NetFlow data from the host

Comment: *

Name: *

Email: *

Verification: *

A company recently discovered an attack propagating throughout their Windows network via a file named abc428565580xyz exe The malicious file was uploaded to a Simple Custom Detection list in the AMP for Endpoints Portal and the currently applied policy for the Windows clients was updated to reference the detection list Verification testing scans on known infected systems shows that AMP for Endpoints is not detecting the presence of this file as an indicator of compromise What must be performed to ensure detection of the malicious file?

• A.Upload the malicious file to the Blocked Application Control List
• B.Use an Advanced Custom Detection List instead of a Simple Custom Detection List
• C.Check the box in the policy configuration to send the file to Cisco Threat Grid for dynamic analysis
• D.Upload the SHA-256 hash for the file to the Simple Custom Detection List

Comment: *

Name: *

Email: *

Verification: *

What are two benefits of workload security? (Choose two.)

• A.Tracked application security
• B.Automated patching
• C.Reduced attack surface
• D.Scalable security policies
• E.Workload modeling

Comment: *

Name: *

Email: *

Verification: *