- (Exam Topic 3)
Which technology provides a combination of endpoint protection endpoint detection, and response?

1. A. Cisco AMP
2. B. Cisco Talos
3. C. Cisco Threat Grid
4. D. Cisco Umbrella

Correct Answer: A

- (Exam Topic 2)
What is a functional difference between a Cisco ASA and a Cisco IOS router with Zone-based policy firewall?

1. A. The Cisco ASA denies all traffic by default whereas the Cisco IOS router with Zone-Based Policy Firewall starts out by allowing all traffic, even on untrusted interfaces
2. B. The Cisco IOS router with Zone-Based Policy Firewall can be configured for high availability, whereas the Cisco ASA cannot
3. C. The Cisco IOS router with Zone-Based Policy Firewall denies all traffic by default, whereas the Cisco ASA starts out by allowing all traffic until rules are added
4. D. The Cisco ASA can be configured for high availability whereas the Cisco IOS router with Zone-Based Policy Firewall cannot

Correct Answer: A

- (Exam Topic 3)
Why is it important to patch endpoints consistently?

1. A. Patching reduces the attack surface of the infrastructure.
2. B. Patching helps to mitigate vulnerabilities.
3. C. Patching is required per the vendor contract.
4. D. Patching allows for creating a honeypot.

Correct Answer: B

- (Exam Topic 2)
An engineer notices traffic interruption on the network. Upon further investigation, it is learned that broadcast packets have been flooding the network. What must be configured, based on a predefined threshold, to address this issue?

1. A. Bridge Protocol Data Unit guard
2. B. embedded event monitoring
3. C. storm control
4. D. access control lists

Correct Answer: C
Storm control prevents traffic on a LAN from being disrupted by a broadcast, multicast, or unicast storm on one of the physical interfaces. A LAN storm occurs when packets flood the LAN, creating excessive traffic and degrading network performance. Errors in the protocol-stack implementation, mistakes in network configurations, or users issuing a denial-of-service attack can cause a storm.By using the “storm-control broadcast level [falling-threshold]” we can limit the broadcast traffic on the switch.

- (Exam Topic 2)
An organization has two systems in their DMZ that have an unencrypted link between them for communication.
The organization does not have a defined password policy and uses several default accounts on the systems. The application used on those systems also have not gone through stringent code reviews. Which vulnerability would help an attacker brute force their way into the systems?

1. A. weak passwords
2. B. lack of input validation
3. C. missing encryption
4. D. lack of file permission

Correct Answer: A