- (Exam Topic 1)
After deploying a Cisco ESA on your network, you notice that some messages fail to reach their destinations. Which task can you perform to determine where each message was lost?

1. A. Configure the trackingconfig command to enable message tracking.
2. B. Generate a system report.
3. C. Review the log files.
4. D. Perform a trace.

Correct Answer: A
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_A

- (Exam Topic 3)
An engineer must configure Cisco AMP for Endpoints so that it contains a list of files that should not be executed by users. These files must not be quarantined. Which action meets this configuration requirement?

1. A. Identity the network IPs and place them in a blocked list.
2. B. Modify the advanced custom detection list to include these files.
3. C. Create an application control blocked applications list.
4. D. Add a list for simple custom detection.

Correct Answer: C

- (Exam Topic 2)
Drag and drop the VPN functions from the left onto the description on the right.

Solution:


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 3)
When a next-generation endpoint security solution is selected for a company, what are two key deliverables that help justify the implementation? (Choose two.)

1. A. signature-based endpoint protection on company endpoints
2. B. macro-based protection to keep connected endpoints safe
3. C. continuous monitoring of all files that are located on connected endpoints
4. D. email integration to protect endpoints from malicious content that is located in email
5. E. real-time feeds from global threat intelligence centers

Correct Answer: CE

- (Exam Topic 1)
Which two kinds of attacks are prevented by multifactor authentication? (Choose two)

1. A. phishing
2. B. brute force
3. C. man-in-the-middle
4. D. DDOS
5. E. teardrop

Correct Answer: BC