- (Exam Topic 1)
An engineer is configuring AMP for endpoints and wants to block certain files from executing. Which outbreak control method is used to accomplish this task?

1. A. device flow correlation
2. B. simple detections
3. C. application blocking list
4. D. advanced custom detections

Correct Answer: C

- (Exam Topic 3)
What is the difference between a vulnerability and an exploit?

1. A. A vulnerability is a hypothetical event for an attacker to exploit
2. B. A vulnerability is a weakness that can be exploited by an attacker
3. C. An exploit is a weakness that can cause a vulnerability in the network
4. D. An exploit is a hypothetical event that causes a vulnerability in the network

Correct Answer: B

- (Exam Topic 3)
Which two capabilities does an MDM provide? (Choose two.)

1. A. delivery of network malware reports to an inbox in a schedule
2. B. unified management of mobile devices, Macs, and PCs from a centralized dashboard
3. C. enforcement of device security policies from a centralized dashboard
4. D. manual identification and classification of client devices
5. E. unified management of Android and Apple devices from a centralized dashboard

Correct Answer: BC

- (Exam Topic 3)
Which role is a default guest type in Cisco ISE?

1. A. Monthly
2. B. Yearly
3. C. Contractor
4. D. Full-Time

Correct Answer: C
https://www.cisco.com/c/en/us/td/docs/security/ise/1-4-1/admin_guide/b_ise_admin_guide_141/b_ise_admin_g

- (Exam Topic 3)
Which Talos reputation center allows for tracking the reputation of IP addresses for email and web traffic?

1. A. IP and Domain Reputation Center
2. B. File Reputation Center
3. C. IP Slock List Center
4. D. AMP Reputation Center

Correct Answer: A