- (Exam Topic 2)
What is the difference between Cross-site Scripting and SQL Injection, attacks?

1. A. Cross-site Scripting is an attack where code is injected into a database, whereas SQL Injection is an attack where code is injected into a browser.
2. B. Cross-site Scripting is a brute force attack targeting remote sites, whereas SQL Injection is a social engineering attack.
3. C. Cross-site Scripting is when executives in a corporation are attacked, whereas SQL Injection is when a database is manipulated.
4. D. Cross-site Scripting is an attack where code is executed from the server side, whereas SQL Injection is an attack where code is executed from the client side.

Correct Answer: A
Answer B is not correct because Cross-site Scripting (XSS) is not a brute force attack.Answer C is not correct because the statement “Cross-site Scripting is when executives in a corporation are attacked” is not true. XSS is a client-side vulnerability that targets other application users.Answer D is not correct because the statement “Cross-site Scripting is an attack where code is executed from the server side”. In fact, XSS is a method that exploits website vulnerability by injecting scripts that will run at client’s side.Therefore only answer A is left. In XSS, an attacker will try to inject his malicious code (usually malicious links) into a database. When other users follow his links, their web browsers are redirected to websites whereattackers can steal data from them. In a SQL Injection, an attacker will try to inject SQL code (via his browser) into forms, cookies, or HTTP headers that do not use data sanitizing or validation methods of GET/POSTparameters.Note: The main difference between a SQL and XSS injection attack is that SQL injection attacks are used to steal information from databases whereas XSS attacks are used to redirect users to websites where attackers can steal data from them.

- (Exam Topic 1)
Which two features of Cisco DNA Center are used in a Software Defined Network solution? (Choose two)

1. A. accounting
2. B. assurance
3. C. automation
4. D. authentication
5. E. encryption

Correct Answer: BC
Reference: https://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/dna-center/nb-06- cisco-dna-center-aag-cte-en.html

- (Exam Topic 2)
What is a benefit of conducting device compliance checks?

1. A. It indicates what type of operating system is connecting to the network.
2. B. It validates if anti-virus software is installed.
3. C. It scans endpoints to determine if malicious activity is taking place.
4. D. It detects email phishing attacks.

Correct Answer: B

- (Exam Topic 2)
What is provided by the Secure Hash Algorithm in a VPN?

1. A. integrity
2. B. key exchange
3. C. encryption
4. D. authentication

Correct Answer: A
Reference: https://www.ciscopress.com/articles/article.asp?p=24833&seqNum=4

- (Exam Topic 3)
Which solution detects threats across a private network, public clouds, and encrypted traffic?

1. A. Cisco Stealthwatch
2. B. Cisco CTA
3. C. Cisco Encrypted Traffic Analytics
4. D. Cisco Umbrella

Correct Answer: A