An administrator is trying to determine which applications are being used in the network but does not want the network devices to send metadata to Cisco Firepower. Which feature should be used to accomplish this?

• A.NetFlow
• B.Packet Tracer
• C.Network Discovery
• D.Access Control

Comment: *

Name: *

Email: *

Verification: *

Which ID store requires that a shadow user be created on Cisco ISE for the admin login to work?

• A.Internal Database
• B.RSA SecureID
• C.Active Directory
• D.LDAP

Comment: *

Name: *

Email: *

Verification: *

An engineer has enabled LDAP accept queries on a listener. Malicious actors must be prevented from quickly identifying all valid recipients. What must be done on the Cisco ESA to accomplish this goal?

• A.Use Bounce Verification
• B.Configure incoming content filters.
• C.Bypass LDAP access queries in the recipient access table.
• D.Configure Directory Harvest Attack Prevention

Correct Answer: D

Explanation

Comment: *

Name: *

Email: *

Verification: *

When planning a VPN deployment, for which reason does an engineer opt for an active/active FlexVPN configuration as opposed to DMVPN?

• A.HSRP is used for faliover.
• B.Floating static routes are required.
• C.Multiple routers or VRFs are required.
• D.Traffic is distributed statically by default.

Comment: *

Name: *

Email: *

Verification: *

Which security category does Cisco Umbrella use to block DNS requests that have not been seen in Umbrella before or have not yet had a client lookup?

• A.Dynamic DNS
• B.Newly Seen Domains
• C.Potentially Harmful Domains
• D.Malware

Comment: *

Name: *

Email: *

Verification: *