NEW QUESTION 1
Which signature engine is responsible for ICMP inspection on Cisco IPS?

• A. AICEngine
• B. Fixed Engine
• C. Service Engine
• D. Atomic IP Engine

Answer: D

NEW QUESTION 2
Refer to the Following. Which option describe the result of this configuration on a Cisco ASA firewall?
asafwl (config) #http server enable asafw1(config)#http 10.10.10.1 255.255.255.255 inside

• A. The firewall allows command-line access from 10.10.10.1
• B. The firewall allows ASDM access from a client on 10.10.10.1
• C. The management IP address of the firewall is 10.10.10.1
• D. The inside interface IP address of the firewall is 10.10.10.1

Answer: B

NEW QUESTION 3
What can Cisco Prime Security Manager (PRSM) be used to achieve?

• A. Configure and Monitor Cisco CX Application Visibility and Control, web filtering, access and decryption policies
• B. Configure Cisco ASA connection limits
• C. Configure TCP state bypass in Cisco ASA and IOS
• D. Configure Cisco IPS signature and monitor signature alerts
• E. Cisco Cloud Security on Cisco ASA

Answer: A

NEW QUESTION 4
An engineer is trying to configuring email encryption on Cisco ESA. Which technology could be used as a key server?

• A. Cisco Registered Envelop Service
• B. Local CA
• C. Cisco Talos Services
• D. Cisco ISE

Answer: B

NEW QUESTION 5




What is the maximum message size that the Cisco Email Security Appliance will accept from the violet.public domain?

• A. 1 KB
• B. 100 KB
• C. 1 MB
• D. 10 MB
• E. 100 MB
• F. Unlimited

Answer: D

NEW QUESTION 6
When you create a new server profile on the Cisco ESA, which subcommand of the ldapconfig command configures spam quarantine end-user authentication?

• A. isqauth
• B. isqalias
• C. test
• D. server

Answer: A

NEW QUESTION 7
Which type of server is required to communicate with a third-party DLP solution?

• A. an ICAP-capable proxy server
• B. a PKI certificate server
• C. an HTTP server
• D. an HTTPS server

Answer: A

NEW QUESTION 8
Which Cisco ESA command is used to edit the ciphers that are used for GUI access?

• A. interfaceconfig
• B. etherconfig
• C. certconfig
• D. sslconfig

Answer: D

NEW QUESTION 9
Troubleshoot command for NGIPSv.

• A. system generate-troubleshoot all
• B. sudo sf_troubleshoot.pl

Answer: A

NEW QUESTION 10
How many interfaces can a Cisco ASA bridge group support and how many bridge groups can a Cisco ASA appliance support?

• A. up to 2 interfaces per bridge group and up to 4 bridge groups per Cisco ASA appliance
• B. up to 2 interfaces per bridge group and up to 8 bridge groups per Cisco ASA appliance
• C. up to 4 interfaces per bridge group and up to 4 bridge groups per Cisco ASA appliance
• D. up to 4 interfaces per bridge group and up to 8 bridge groups per Cisco ASA appliance
• E. up to 8 interfaces per bridge group and up to 4 bridge groups per Cisco ASA appliance
• F. up to 8 interfaces per bridge group and up to 8 bridge groups per Cisco ASA appliance

Answer: D

NEW QUESTION 11
Which sensor deployment mode does Cisco recommend when interface capacity is limited and you need to increase sensor functionality?

• A. inline interface pair mode
• B. inline VLAN pair mode
• C. inline VLAN group mode
• D. VLAN group mode

Answer: C

NEW QUESTION 12
Which three options are characteristics of router-based IPS? (Choose three.)

• A. It is used for large networks.
• B. It is used for small networks.
• C. It supports virtual sensors.
• D. It supports multiple VRFs.
• E. It uses configurable anomaly detection.
• F. Signature definition files have been deprecated.

Answer: BDF

NEW QUESTION 13
ACisco Email Security Appliance uses which message filter to drop all executable attachments entering and leaving the Cisco Email Security Appliance?

• A. drop-ex
• B. if (attachment-filename == "\.exe$") OR (attachment-filetype == "exe") { drop(); }
• C. drop-ex
• D. if (recv-listener == "InboundMail" ) AND ( (attachment-filename == "\.exe$") OR (attachment-filetype == "exe")) { drop(); }
• E. drop-exe! if (attachment-filename == "\.exe$") OR (attachment-filetype == "exe") { drop(); }
• F. drop-exe! if (recv-listener == "InboundMail" ) AND ( (attachment-filename == "\.exe$") OR (attachment-filetype == "exe")) { drop(); }

Answer: A

NEW QUESTION 14
Which Cisco ESA component receives connections from external mail servers?

• A. MTA
• B. public listener
• C. private listener
• D. recipient access table
• E. SMTP incoming relay agent

Answer: B

NEW QUESTION 15
Refer to the exhibit.

The security engineer has configured Cisco cloud web security redirection on a Cisco ASA firewall. Which statement describes what can be determined from exhibit?

• A. In case of issues, the next step should be to perform debugging on the Cisco ASA.
• B. The URL visited by the user was LAB://testgroup.
• C. This out has been obtained by browsing to whoami.scansafe.net
• D. The IP address of the Scansafe tower is 209.165.200.241

Answer: C

NEW QUESTION 16



























What is the maximum message size that the Cisco Email Security Appliance will accept from the violet.public domain?

• A. 1 KB
• B. 100 KB
• C. 1 MB
• D. 10 MB
• E. 100 MB
• F. Unlimited

Answer: D

Explanation: From the instructions we know that the reputation score for the violet.public domain has been set to 8. From the HAT table shown below we know that a score of 8 belongs to the UNKNOWNLIST group, which is assigned the ACCEPTED policy.
Capture

By clicking on the ACCEPTED policy we see that max message size has been set to the default value of 10M: Capture

NEW QUESTION 17




The Cisco Email Security Appliance will reject messages from which domains?

• A. re
• B. public
• C. re
• D. public and orang
• E. public
• F. re
• G. public, orang
• H. Public and yello
• I. public
• J. orang
• K. public
• L. viole
• M. public
• N. viole
• O. public and blue.public
• P. None of the listed domains

Answer: C

NEW QUESTION 18
Which interface on the Cisco Email Security Appliance has HTTP and SSH enabled by default?

• A. data 1
• B. data 2
• C. management 1
• D. all interfaces

Answer: A

NEW QUESTION 19
An engineer is used the reporting feature on a WSA. Which option must they consider about the reporting capabilities?

• A. Reports can be viewed for a particular domain, user or category.
• B. Detail reports require a separate license.
• C. Reports to view system activity over a specific period of time do not exist.
• D. report must be scheduled manually.

Answer: D