What is a benefit of using telemetry over SNMP to configure new routers for monitoring purposes?
Correct Answer: D
ExplanationSNMP polling can often be in the order of 5-10 minutes, CLIs are unstructured and prone to change which can often break scripts.The traditional use of the pull model, where the client requests data from the network does not scale when what you want is near real-time data.Moreover, in some use cases, there is the need to be notified only when some data changes, like interfaces status, protocol neighbors change etc.Model-Driven Telemetry is a new approach for network monitoring in which data is streamed from network devices continuously using a push model and provides near real-time access to operational statistics. Referfence: https://developer.cisco.com/docs/ios-xe/#!streaming-telemetry-quick-start-guide/streaming telemetry
Question 22
Which risk is created when using an Internet browser to access cloud-based service?
Correct Answer: D
Using an Internet browser to access cloud-based service creates the risk of insecure implementation of API. API stands for Application Programming Interface, which is a set of rules and protocols that allow different applications or services to communicate and exchange data. API is often used to access cloud-based service, such as software as a service (SaaS), platform as a service (PaaS), or infrastructure as a service (IaaS). However, if the API is not implemented securely, it can expose sensitive data or allow unauthorized access to the cloud service. For example, an API may not use encryption, authentication, or authorization mechanisms to protect the data in transit or at rest. An API may also have vulnerabilities such as injection, broken authentication, or insufficient logging and monitoring, which can be exploited by attackers to compromise the cloud service or the user's browser. Therefore, it is important to follow the best practices and standards for secure API development and testing, such as OWASP API Security Top 10. References: * 1: Implementing and Operating Cisco Security Core Technologies (SCOR) - Cisco * 2: 350-701 SCOR - Cisco * 3: Implementing and Operating Cisco Security Core Technologies (SCOR) v1.0 * 4: 12 Cloud Security Issues: Risks, Threats & Challenges - CrowdStrike * 5: 12 Risks, Threats, & Vulnerabilities in Moving to the Cloud - SEI Blog * 6: Remote Browser Isolation Protects Users from Threats - Cisco Umbrella * 7: Which risk is created when using an Internet browser to access cloud-based service? * 8: Browser in the Cloud: The Evolution of Secure Browsing - Leostream * [9]: OWASP API Security Top 10 2023
Question 23
Refer to the exhibit. Which command was used to generate this output and to show which ports are authenticating with dot1x or mab?
Correct Answer: B
Question 24
Drag and drop the common security threats from left onto the definitions on the right.
Correct Answer:
Question 25
In a PaaS model, which layer is the tenant responsible for maintaining and patching?
