- (Exam Topic 1)
Which benefit does endpoint security provide the overall security posture of an organization?

1. A. It streamlines the incident response process to automatically perform digital forensics on the endpoint.
2. B. It allows the organization to mitigate web-based attacks as long as the user is active in the domain.
3. C. It allows the organization to detect and respond to threats at the edge of the network.
4. D. It allows the organization to detect and mitigate threats that the perimeter security devices do not detect.

Correct Answer: D

- (Exam Topic 1)
Which two risks is a company vulnerable to if it does not have a well-established patching solution for endpoints? (Choose two)

1. A. exploits
2. B. ARP spoofing
3. C. denial-of-service attacks
4. D. malware
5. E. eavesdropping

Correct Answer: AD
Malware means “malicious software”, is any software intentionally designed to cause damage to a computer, server, client, or computer network. The most popular types of malware includes viruses, ransomware and spyware. Virus Possibly the most common type of malware, viruses attach their malicious code to clean code and wait to be run.
Ransomware is malicious software that infects your computer and displays messages demanding a fee to be paid in order for your system to work again.Spyware is spying software that can secretly record everything you enter, upload, download, and store on your computers or mobile devices. Spyware always tries to keep itself hidden.An exploit is a code that takes advantage of a software vulnerability or security flaw.Exploits and malware are two risks for endpoints that are not up to date. ARP spoofing and eavesdropping are attacks against the network while denial-of-service attack is based on the flooding of IP packets.

- (Exam Topic 3)
Refer to the exhibit.

How does Cisco Umbrella manage traffic that is directed toward risky domains?

1. A. Traffic is proximed through the intelligent proxy.
2. B. Traffic is managed by the security settings and blocked.
3. C. Traffic is managed by the application settings, unhandled and allowed.
4. D. Traffic is allowed but logged.

Correct Answer: B

- (Exam Topic 3)
How does Cisco Umbrella protect clients when they operate outside of the corporate network?

1. A. by modifying the registry for DNS lookups
2. B. by using Active Directory group policies to enforce Cisco Umbrella DNS servers
3. C. by using the Cisco Umbrella roaming client
4. D. by forcing DNS queries to the corporate name servers

Correct Answer: C

- (Exam Topic 2)
Which algorithm provides asymmetric encryption?

1. A. RC4
2. B. AES
3. C. RSA
4. D. 3DES

Correct Answer: C