Drag and Drop Question
Drag and drop the deployment models from the left onto the explanations on the right.

Correct Answer:

Explanation:
Passive or ERSPAN Passive - Passive interfaces monitor traffic flowing across a network using a switch SPAN or mirror port. The SPAN or mirror port allows for traffic to be copied from other ports on the switch. This function provides the system visibility within the network without being in the flow of network traffic. When you configure the FTD in a passive deployment, the FTD cannot take certain actions such as blocking or shaping traffic. Passive interfaces receive all traffic unconditionally. and no traffic received on these interfaces is retransmitted. Encapsulated remote switched port analyzer (ERSPAN) interfaces allow you to monitor traffic from source ports distributed over multiple switches, and uses GRE to encapsulate the traffic. ERSPAN interfaces are only allowed when the FTD is in routed firewall mode.
https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/inline_sets_and_passive_interfaces_for_firepower_threat_defense.html#concept_835CD87F E5ED4CD9BAEE2118D588AC58

Comment: *

Name: *

Email: *

Verification: *

An organization is implementing URL blocking using Cisco Umbrella. The users are able to go to some sites but other sites are not accessible due to an error. Why is the error occurring?

• A.Client computers do not have an SSL certificate deployed from an internal CA server.
• B.IP-Layer Enforcement is not configured.
• C.Intelligent proxy and SSL decryption is disabled in the policy.
• D.Client computers do not have the Cisco Umbrella Root CA certificate installed.

Comment: *

Name: *

Email: *

Verification: *

A user has a device in the network that is receiving too many connection requests from multiple machines.
Which type of attack is the device undergoing?

• A.SYN flood
• B.slowloris
• C.pharming
• D.phishing

Comment: *

Name: *

Email: *

Verification: *

How does DNS Tunneling exfiltrate data?

• A.An attacker registers a domain that a client connects to based on DNS records and sends malware through that connection.
• B.An attacker opens a reverse DNS shell to get into the client's system and install malware on it.
• C.An attacker uses a non-standard DNS port to gain access to the organization's DNS servers in order to poison the resolutions.
• D.An attacker sends an email to the target with hidden DNS resolvers in it to redirect them to a malicious domain.

Correct Answer: A

Comment: *

Name: *

Email: *

Verification: *

Which category includes Dos Attacks?

• A.phishing attacks
• B.virus attacks
• C.flood attacks
• D.trojan attacks

Comment: *

Name: *

Email: *

Verification: *