Which standard is used to automate exchanging cyber threat information?
Correct Answer: A
TAXII, short for Trusted Automated eXchange of Intelligence Information, defines how cyber threat information can be shared via services and message exchanges.
Question 217
Which two tasks allow NetFlow on a Cisco ASA 5500 Series firewall? (Choose two)
Correct Answer: A,E
NetFlow is a protocol that collects and exports information about network traffic flows. NetFlow Version 9 is the latest version supported by the Cisco ASA 5500 Series firewall. To enable NetFlow on the ASA, you need to perform two main tasks: define a NetFlow collector and apply NetFlow exporter to an interface. A NetFlow collector is a device or application that receives and processes the NetFlow records sent by the ASA. You can define a NetFlow collector by using the flow-export command, which specifies the IP address, port number, and interface of the collector. A NetFlow exporter is a configuration that determines which traffic flows are monitored and exported by the ASA. You can apply NetFlow exporter to an interface by using the Modular Policy Framework (MPF), which allows you to create class maps and policy maps to match and act on interesting traffic. You can use the flow-export event-type option in the policy map to select the NetFlow events that you want to export. The other options (B, C, and D) are not required or correct for enabling NetFlow on the ASA. You do not need to create an ACL to allow UDP traffic on port 9996, because the ASA uses a random high port number to send NetFlow records to the collector. You do not need to apply NetFlow exporter to the outside interface in the inbound direction, because you can apply it to any interface and direction that you want to monitor. You do not need to create a class map to match interesting traffic, because the ASA monitors all traffic flows by default, unless you filter them by using the flow-export filters command. References: * Cisco Secure Firewall ASA NetFlow Implementation Guide, section "About NSEL" * Cisco Secure Firewall ASA NetFlow Implementation Guide, section "Configure NSEL Collectors (CLI)" * Cisco Secure Firewall ASA NetFlow Implementation Guide, section "Configure Flow-Export Actions Through Modular Policy Framework" * Configuring NetFlow on ASA with ASDM, section "Enabling NetFlow on ASA"
Question 218
With which components does a southbound API within a software-defined network architecture communicate?
Correct Answer: D
The Southbound API is used to communicate between Controllers and network devices.
Question 219
A network engineer has entered the snmp-server user andy myv3 auth sha cisco priv aes 256 cisc0380739941 command and needs to send SNMP information to a host at 10.255.254.1. Which command achieves this goal?
Correct Answer: A
ExplanationThe command "snmp-server user user-name group-name [remote ip-address [udp-port port]] {v1 | v2c | v3 [encrypted] [auth {md5 | sha} auth-password]} [access access-list]" adds a new user (in this case "andy") to an SNMPv3 group (in this case group name "myv3") and configures a password for the user.In the "snmp-server host" command, we need to:+ Specify the SNMP version with key word "version {1 | 2 | 3}"+ Specify the username ("andy"), not group name ("myv3").Note: In "snmp-server host inside ..." command, "inside" is the interface name of the ASA interface through which the NMS (located at 10.255.254.1) can be reached.
Question 220
Which command enables 802.1X globally on a Cisco switch?
