- (Exam Topic 2)
An engineer is implementing NTP authentication within their network and has configured both the client and
server devices with the command ntp authentication-key 1 md5 Cisc392368270. The server at 1.1.1.1 is attempting to authenticate to the client at 1.1.1.2, however it is unable to do so. Which command is required to enable the client to accept the server’s authentication key?

1. A. ntp peer 1.1.1.1 key 1
2. B. ntp server 1.1.1.1 key 1
3. C. ntp server 1.1.1.2 key 1
4. D. ntp peer 1.1.1.2 key 1

Correct Answer: B
To configure an NTP enabled router to require authentication when other devices connect to it, use thefollowing commands:NTP_Server(config)#ntp authentication-key 2 md5 securitytutNTP_Server(config)#ntp authenticateNTP_Server(config)#ntp trusted-key 2Then you must configure the same authentication-key on the client router:NTP_Client(config)#ntp authentication-key 2 md5 securitytutNTP_Client(config)#ntp authenticateNTP_Client(config)#ntp trusted-key 2NTP_Client(config)#ntp server 10.10.10.1 key 2Note: To configure a Cisco device as a NTP client, use the command ntp server <IP address>. For example:Router(config)#ntp server 10.10.10.1. This command will instruct the router to query 10.10.10.1 for the time.

- (Exam Topic 3)
An engineer needs to add protection for data in transit and have headers in the email message Which
configuration is needed to accomplish this goal?

1. A. Provision the email appliance
2. B. Deploy an encryption appliance.
3. C. Map sender !P addresses to a host interface.
4. D. Enable flagged message handling

Correct Answer: D

- (Exam Topic 3)
An engineer is configuring Dropbox integration with Cisco Cloudlock. Which action must be taken before granting API access in the Dropbox admin console?

1. A. Authorize Dropbox within the Platform settings in the Cisco Cloudlock portal.
2. B. Add Dropbox to the Cisco Cloudlock Authentication and API section in the Cisco Cloudlock portal.
3. C. Send an API request to Cisco Cloudlock from Dropbox admin portal.
4. D. Add Cisco Cloudlock to the Dropbox admin portal.

Correct Answer: A

- (Exam Topic 3)
What is the intent of a basic SYN flood attack?

1. A. to solicit DNS responses
2. B. to exceed the threshold limit of the connection queue
3. C. to flush the register stack to re-initiate the buffers
4. D. to cause the buffer to overflow

Correct Answer: B

- (Exam Topic 3)
An organization has a requirement to collect full metadata information about the traffic going through their AWS cloud services They want to use this information for behavior analytics and statistics Which two actions must be taken to implement this requirement? (Choose two.)

1. A. Configure Cisco ACI to ingest AWS information.
2. B. Configure Cisco Thousand Eyes to ingest AWS information.
3. C. Send syslog from AWS to Cisco Stealthwatch Cloud.
4. D. Send VPC Flow Logs to Cisco Stealthwatch Cloud.
5. E. Configure Cisco Stealthwatch Cloud to ingest AWS information

Correct Answer: BE