- (Exam Topic 3)
An engineer is configuring IPsec VPN and needs an authentication protocol that is reliable and supports ACK and sequence. Which protocol accomplishes this goal?

1. A. AES-192
2. B. IKEv1
3. C. AES-256
4. D. ESP

Correct Answer: D

- (Exam Topic 2)
Which group within Cisco writes and publishes a weekly newsletter to help cybersecurity professionals remain aware of the ongoing and most prevalent threats?

1. A. PSIRT
2. B. Talos
3. C. CSIRT
4. D. DEVNET

Correct Answer: B
Reference: https://talosintelligence.com/newsletters

- (Exam Topic 1)
Which Cisco security solution protects remote users against phishing attacks when they are not connected to the VPN?

1. A. Cisco Stealthwatch
2. B. Cisco Umbrella
3. C. Cisco Firepower
4. D. NGIPS

Correct Answer: B
Cisco Umbrella protects users from accessing malicious domains by proactively analyzing and blocking unsafe destinations – before a connection is ever made. Thus it can protect from phishing attacks by blocking suspicious domains when users click on the given links that an attacker sent. Cisco Umbrella roaming protects your employees even when they are off the VPN.

- (Exam Topic 2)
Drag and drop the descriptions from the left onto the correct protocol versions on the right.

Solution:
Graphical user interface Description automatically generated with low confidence

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 1)
Which SNMPv3 configuration must be used to support the strongest security possible?

1. A. asa-host(config)#snmp-server group myv3 v3 privasa-host(config)#snmp-server user andy myv3 auth sha cisco priv des ciscXXXXXXXX asa-host(config)#snmp-server host inside 10.255.254.1 version 3 andy
2. B. asa-host(config)#snmp-server group myv3 v3 noauthasa-host(config)#snmp-server user andy myv3 auth sha cisco priv aes 256 ciscXXXXXXXX asa-host(config)#snmp-server host inside 10.255.254.1 version 3 andy
3. C. asa-host(config)#snmpserver group myv3 v3 noauthasa-host(config)#snmp-server user andy myv3 auth sha cisco priv 3des ciscXXXXXXXX asa-host(config)#snmp-server host inside 10.255.254.1 version 3 andy
4. D. asa-host(config)#snmp-server group myv3 v3 privasa-host(config)#snmp-server user andy myv3 auth sha cisco priv aes 256 ciscXXXXXXXX asa-host(config)#snmp-server host inside 10.255.254.1 version 3 andy

Correct Answer: D