How does Cisco Umbrella protect clients when they operate outside of the corporate network?

• A.by using Active Directory group policies to enforce Cisco Umbrella DNS servers
• B.by using the Cisco Umbrella roaming client
• C.by forcing DNS queries to the corporate name servers
• D.by modifying the registry for DNS lookups

Comment: *

Name: *

Email: *

Verification: *

An administrator is configuring a DHCP server to better secure their environment. They need to be able to ratelimit the traffic and ensure that legitimate requests are not dropped. How would this be accomplished?

• A.Set a trusted interface for the DHCP server
• B.Set the DHCP snooping bit to 1
• C.Add entries in the DHCP snooping database
• D.Enable ARP inspection for the required VLAN

Correct Answer: A

ExplanationTo understand DHCP snooping we need to learn about DHCP spoofing attack first.

DHCP spoofing is a type of attack in that the attacker listens for DHCP Requests from clients and answers them with fake DHCP Response before the authorized DHCP Response comes to the clients. The fake DHCP Response often gives its IP address as the client default gateway -> all the traffic sent from the client will go through the attacker computer, the attacker becomes a "man-in-the-middle".The attacker can have some ways to make sure its fake DHCP Response arrives first. In fact, if the attacker is "closer" than the DHCP Server then he doesn't need to do anything. Or he can DoS the DHCP Server so that it can't send the DHCP Response.DHCP snooping can prevent DHCP spoofing attacks. DHCP snooping is a Cisco Catalyst feature thatdetermines which switch ports can respond to DHCP requests. Ports are identified as trusted and untrusted.

Only ports that connect to an authorized DHCP server are trusted, and allowed to send all types of DHCPmessages. All other ports on the switch are untrusted and can send only DHCP requests. If a DHCP responseis seen on an untrusted port, the port is shut down.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit

When configuring this access control rule in Cisco FMC, what happens with the traffic destined to the DMZjnside zone once the configuration is deployed?

• A.All traffic from any zone will be allowed to the DMZ_inside zone only after inspection
• B.No traffic will be allowed through to the DMZ_inside zone unless it's already trusted
• C.All traffic from any zone to the DMZ_inside zone will be permitted with no further inspection
• D.No traffic will be allowed through to the DMZ_inside zone regardless of if it's trusted or not

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

What does the API key do while working with https://api.amp.cisco.com/v1/computers?

• A.displays client ID
• B.HTTP authorization
• C.Imports requests
• D.HTTP authentication

Comment: *

Name: *

Email: *

Verification: *

An organization is implementing URL blocking using Cisco Umbrell
a. The users are able to go to some sites but other sites are not accessible due to an error. Why is the error occurring?

• A.Client computers do not have the Cisco Umbrella Root CA certificate installed.
• B.IP-Layer Enforcement is not configured.
• C.Intelligent proxy and SSL decryption is disabled in the policy.
• D.Client computers do not have an SSL certificate deployed from an internal CA server.

Comment: *

Name: *

Email: *

Verification: *