- (Exam Topic 2)
An organization received a large amount of SPAM messages over a short time period. In order to take action on the messages, it must be determined how harmful the messages are and this needs to happen dynamically.
What must be configured to accomplish this?

1. A. Configure the Cisco WSA to modify policies based on the traffic seen
2. B. Configure the Cisco ESA to receive real-time updates from Talos
3. C. Configure the Cisco WSA to receive real-time updates from Talos
4. D. Configure the Cisco ESA to modify policies based on the traffic seen

Correct Answer: D
The Mail Policies menu is where almost all of the controls related to email filtering happens. All the security and content filtering policies are set here, so it’s likely that, as an ESA administrator, the pages on this menu are where you are likely to spend most of your time.

- (Exam Topic 3)
An engineer is configuring their router to send NetfFow data to Stealthwatch which has an IP address of 1 1 11 using the flow record Stea!thwatch406397954 command Which additional command is required to complete the flow record?

1. A. transport udp 2055
2. B. match ipv4 ttl
3. C. cache timeout active 60
4. D. destination 1.1.1.1

Correct Answer: B

- (Exam Topic 2)
An organization is receiving SPAM emails from a known malicious domain. What must be configured in order to prevent the session during the initial TCP communication?

1. A. Configure the Cisco ESA to drop the malicious emails
2. B. Configure policies to quarantine malicious emails
3. C. Configure policies to stop and reject communication
4. D. Configure the Cisco ESA to reset the TCP connection

Correct Answer: D

- (Exam Topic 3)
Which solution supports high availability in routed or transparent mode as well as in northbound and southbound deployments?

1. A. Cisco FTD with Cisco ASDM
2. B. Cisco FTD with Cisco FMC
3. C. Cisco Firepower NGFW physical appliance with Cisc
4. D. FMC
5. E. Cisco Firepower NGFW Virtual appliance with Cisco FMC

Correct Answer: B

- (Exam Topic 3)
An engineer is trying to decide whether to use Cisco Umbrella, Cisco CloudLock, Cisco Stealthwatch, or Cisco AppDynamics Cloud Monitoring for visibility into data transfers as well as protection against data exfiltration Which solution best meets these requirements?

1. A. Cisco CloudLock
2. B. Cisco AppDynamics Cloud Monitoring
3. C. Cisco Umbrella
4. D. Cisco Stealthwatch

Correct Answer: D