- (Exam Topic 3)
Which configuration method provides the options to prevent physical and virtual endpoint devices that are in the same base EPG or uSeg from being able to communicate with each other with Vmware VDS or Microsoft vSwitch?

1. A. inter-EPG isolation
2. B. inter-VLAN security
3. C. intra-EPG isolation
4. D. placement in separate EPGs

Correct Answer: C
Intra-EPG Isolation is an option to prevent physical or virtual endpoint devices that are in the same base EPG or microsegmented (uSeg) EPG from communicating with each other. By default, endpoint devices included in the same EPG are allowed to communicate with one another.

- (Exam Topic 2)
What is managed by Cisco Security Manager?

1. A. access point
2. B. WSA
3. C. ASA
4. D. ESA

Correct Answer: C
Reference: https://www.cisco.com/c/en/us/products/security/security-manager/index.html

- (Exam Topic 1)
Which SNMPv3 configuration must be used to support the strongest security possible?

1. A. asa-host(config)#snmp-server group myv3 v3 privasa-host(config)#snmp-server user andy myv3 auth sha cisco priv des ciscXXXXXXXX asa-host(config)#snmp-server host inside 10.255.254.1 version 3 andy
2. B. asa-host(config)#snmp-server group myv3 v3 noauthasa-host(config)#snmp-server user andy myv3 auth sha cisco priv aes 256 ciscXXXXXXXX asa-host(config)#snmp-server host inside 10.255.254.1 version 3 andy
3. C. asa-host(config)#snmpserver group myv3 v3 noauthasa-host(config)#snmp-server user andy myv3 auth sha cisco priv 3des ciscXXXXXXXX asa-host(config)#snmp-server host inside 10.255.254.1 version 3 andy
4. D. asa-host(config)#snmp-server group myv3 v3 privasa-host(config)#snmp-server user andy myv3 auth sha cisco priv aes 256 ciscXXXXXXXX asa-host(config)#snmp-server host inside 10.255.254.1 version 3 andy

Correct Answer: D

- (Exam Topic 2)
An organization is trying to implement micro-segmentation on the network and wants to be able to gain visibility on the applications within the network. The solution must be able to maintain and force compliance. Which product should be used to meet these requirements?

1. A. Cisco Umbrella
2. B. Cisco AMP
3. C. Cisco Stealthwatch
4. D. Cisco Tetration

Correct Answer: D
Reference:
https://www.cisco.com/c/en/us/products/collateral/data-center-analytics/tetration-analytics/solutionoverview-c22

- (Exam Topic 3)
Which Cisco security solution stops exfiltration using HTTPS?

1. A. Cisco FTD
2. B. Cisco AnyConnect
3. C. Cisco CTA
4. D. Cisco ASA

Correct Answer: C
https://www.cisco.com/c/dam/en/us/products/collateral/security/cognitive-threat-analytics/at-a-glance-c45-7365