NEW QUESTION 1
Which feature of AnyConnect provides better access security across wired and wireless connections with 802.1X?

• A. Trusted Network Detection
• B. Secure Layer 2 Network Access
• C. Flexible AAA Options
• D. AnyConnect with AMP

Answer: D

NEW QUESTION 2
In which two ways should companies modernize their security philosophies? (Choose two.)

• A. Expand their IT departments
• B. Decrease internal access and reporting
• C. Complement threat-centric tactics with trust-centric methods
• D. Reinforce their threat-centric security tactics
• E. Rebuild their security portfolios with new solutions

Answer: AC

NEW QUESTION 3
What is used to reduce attack surfaces?

• A. Remediation
• B. Access
• C. Segmentation
• D. Device trust

Answer: A

NEW QUESTION 4
What are two core functionalities of DNS-layer security? (Choose two.)

• A. Live threat intelligence
• B. Real-time sandboxing
• C. Proxy and file inspection
• D. Data analytics and monitoring
• E. URL filtering

Answer: AB

NEW QUESTION 5
What are the competing IT and Operation Technology (OT) priorities that make securing loT difficult?

• A. Hackers vs safety
• B. Malfunctions v
• C. output
• D. Security vs availability
• E. Innovation v
• F. manufacturing

Answer: A

NEW QUESTION 6
Which feature of ISE provides role-based access control and command level authorization with logging for auditing?

• A. Platform exchange grid
• B. TACACS+Device Administration
• C. Context-aware access
• D. Centralized policy management

Answer: B

NEW QUESTION 7
Which two attack vectors are protected by Visibility and Enforcement? (Choose two.)

• A. Cloud
• B. Mobile
• C. Endpoints
• D. Email
• E. Web

Answer: AE

NEW QUESTION 8
What are two features provided by ISE? (Choose two.)

• A. Guest Management
• B. DDOS attack prevention
• C. Network visibility
• D. Centralized policy management
• E. Device Firewalling

Answer: BD

NEW QUESTION 9
What are two key Cisco loT use cases? (Choose two.)

• A. Financial Institutions
• B. Mobile Utilities
• C. Industrial Security
• D. Parks and Recreation
• E. Connected Health

Answer: CE

NEW QUESTION 10
Which two attack vectors are protected by Malware Protection? (Choose two.)

• A. Voicemail
• B. Email
• C. Web
• D. Mobile
• E. Data Center

Answer: BD

NEW QUESTION 11
What are three major features of StealthWatch? (Choose three )

• A. Threat-based anomaly detection
• B. Malware clustering
• C. Netflow monitoring
• D. Data Loss Prevention
• E. Real-time sandboxing
• F. Forensic investigation

Answer: BD

NEW QUESTION 12
Which two attack vectors are protected by Web Security? (Choose two.)

• A. Data Center
• B. Email
• C. Voicemail
• D. Cloud
• E. Web

Answer: AE

NEW QUESTION 13
What are three key benefits of Cisco NGFW? (Choose three.)

• A. Reduces throughput
• B. Prepares defenses
• C. Reduces complexity
• D. Identifies anomalous traffic
• E. Detects and remediates threats faster
• F. Increases traffic latency

Answer: BCE

NEW QUESTION 14
Which Cisco NGIPS capability provides control over users, applications. devices, threats, and provides insights to network vulnerabilities?

• A. global threat intelligence
• B. advanced threat protection and rapid remediation
• C. contextual awareness
• D. security automation

Answer: B

NEW QUESTION 15
What is a continuous protection feature of Advanced Malware Protection?

• A. Behavioral Indicators of Compromise
• B. Sandboxing File Analysis
• C. Global Threat Intelligence
• D. File Reputation

Answer: A

NEW QUESTION 16
How do AMP's device trajectory capabilities help address customers' breach remediation issues?

• A. It tracks file behavior across the network to see which devices it enters and exits
• B. It analyzes the data from suspicious files to provide a new level of threat intelligence
• C. It searches for potential threats based on identified activities and behaviors
• D. It determines the scope and cause of an outbreak and tracks suspicious files

Answer: A

NEW QUESTION 17
Which feature of AnyConnect provides customers the ability to monitor endpoint application usage to uncover potential behavior anomalies?

• A. Network Visibility Module
• B. Trusted Network Detection
• C. Differentiated Mobile Access
• D. Secure Layer 2 Network Access

Answer: B

NEW QUESTION 18
What are two reasons why perimeter-based network security is no longer sufficient? (Choose two.)

• A. More users
• B. More devices
• C. More IT professionals
• D. More networks
• E. More vulnerabilities

Answer: BE

NEW QUESTION 19
What are three main areas of the Cisco Security Portfolio? (Choose three )

• A. Roaming Security
• B. Advanced Threat
• C. Cloud Security
• D. loT Security
• E. Voice & Collaboration
• F. Firewalls

Answer: BCD

NEW QUESTION 20
How does AnyConnect provide highly secure access for select enterprise mobile apps?

• A. Application Visibility & control
• B. Secure Layer 2 Network Access
• C. Identity Service Engine
• D. Per application VPN

Answer: C

NEW QUESTION 21
Which two products empower customers to create secure next-gen networks? (Choose two.)

• A. ISE
• B. AMP
• C. MFA
• D. ACI
• E. SD-Access

Answer: AE

NEW QUESTION 22
Which two Cisco products help manage data access policy consistently? (Choose two.)

• A. Duo
• B. Cloudlock
• C. AMPforEndpoints
• D. pxGrid
• E. Steathwatch

Answer: BD

NEW QUESTION 23
Which feature of ISE has the capability to encounter a device new on the market, and correctly profile it to onboard it quickly and easily?

• A. Centralized policy management
• B. Platform exchange grid
• C. Context-aware access
• D. Device profiling

Answer: C

NEW QUESTION 24
In the Campus NGFW use case, which capability is provided by NGFW & NGIPS?

• A. Flexible AAA Options
• B. Identity Services Engine
• C. Differentiated Mobile Access
• D. High throughput maintained while still protecting domains against threats

Answer: D

NEW QUESTION 25
What are two common seller obstacles? (Choose two.)

• A. Unresponsive potential customers
• B. Overcrowded portfolios
• C. Complexity of solution components
• D. Seller competition
• E. Fragmented solutions

Answer: AC

NEW QUESTION 26
......