- (Exam Topic 1)
A company is experiencing exfiltration of credit card numbers that are not being stored on-premise. The company needs to be able to protect sensitive data throughout the full environment. Which tool should be used to accomplish this goal?

1. A. Security Manager
2. B. Cloudlock
3. C. Web Security Appliance
4. D. Cisco ISE

Correct Answer: B
Cisco Cloudlock is a cloud-native cloud access security broker (CASB) that helps you move to the cloud safely. It protects your cloud users, data, and apps. Cisco Cloudlock provides visibility and compliance checks, protects data against misuse and exfiltration, and provides threat protections against malware like ransomware.

- (Exam Topic 3)
How does a WCCP-configured router identify if the Cisco WSA is functional?

1. A. If an ICMP ping fails three consecutive times between a router and the WSA, traffic is no longer transmitted to the router.
2. B. If an ICMP ping fails three consecutive times between a router and the WSA, traffic is no longer transmitted to the WSA.
3. C. The WSA sends a Here-l-Am message every 10 seconds, and the router acknowledges with an ISee-You message.
4. D. The router sends a Here-l-Am message every 10 seconds, and the WSA acknowledges with an ISee-You message.

Correct Answer: C

- (Exam Topic 3)
Which direction do attackers encode data in DNS requests during exfiltration using DNS tunneling?

1. A. inbound
2. B. north-south
3. C. east-west
4. D. outbound

Correct Answer: D

- (Exam Topic 1)
Which RADIUS attribute can you use to filter MAB requests in an 802.1 x deployment?

1. A. 1
2. B. 2
3. C. 6
4. D. 31

Correct Answer: C
Reference:
https://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/identity-based-networkingservices/config_

- (Exam Topic 3)
Refer to the exhibit.

The DHCP snooping database resides on router R1, and dynamic ARP inspection is configured only on switch SW2. Which ports must be configured as untrusted so that dynamic ARP inspection operates normally?

1. A. P2 and P3 only
2. B. P5, P6, and P7 only
3. C. P1, P2, P3, and P4 only
4. D. P2, P3, and P6 only

Correct Answer: D