- (Exam Topic 1)
Which two features are used to configure Cisco ESA with a multilayer approach to fight viruses and malware? (Choose two)

1. A. Sophos engine
2. B. white list
3. C. RAT
4. D. outbreak filters
5. E. DLP

Correct Answer: AD

- (Exam Topic 3)
Which solution supports high availability in routed or transparent mode as well as in northbound and southbound deployments?

1. A. Cisco FTD with Cisco ASDM
2. B. Cisco FTD with Cisco FMC
3. C. Cisco Firepower NGFW physical appliance with Cisc
4. D. FMC
5. E. Cisco Firepower NGFW Virtual appliance with Cisco FMC

Correct Answer: B

- (Exam Topic 2)
What is a key difference between Cisco Firepower and Cisco ASA?

1. A. Cisco ASA provides access control while Cisco Firepower does not.
2. B. Cisco Firepower provides identity-based access control while Cisco ASA does not.
3. C. Cisco Firepower natively provides intrusion prevention capabilities while Cisco ASA does not.
4. D. Cisco ASA provides SSL inspection while Cisco Firepower does not.

Correct Answer: C

- (Exam Topic 1)
What is a commonality between DMVPN and FlexVPN technologies?

1. A. FlexVPN and DMVPN use IS-IS routing protocol to communicate with spokes
2. B. FlexVPN and DMVPN use the new key management protocol
3. C. FlexVPN and DMVPN use the same hashing algorithms
4. D. IOS routers run the same NHRP code for DMVPN and FlexVPN

Correct Answer: D
Reference: https://packetpushers.net/cisco-flexvpn-dmvpn-high-level-design/

- (Exam Topic 3)
A network engineer must monitor user and device behavior within the on-premises network. This data must be sent to the Cisco Stealthwatch Cloud analytics platform for analysis. What must be done to meet this
requirement using the Ubuntu-based VM appliance deployed in a VMware-based hypervisor?

1. A. Configure a Cisco FMC to send syslogs to Cisco Stealthwatch Cloud
2. B. Deploy the Cisco Stealthwatch Cloud PNM sensor that sends data to Cisco Stealthwatch Cloud
3. C. Deploy a Cisco FTD sensor to send network events to Cisco Stealthwatch Cloud
4. D. Configure a Cisco FMC to send NetFlow to Cisco Stealthwatch Cloud

Correct Answer: B
Reference:
https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2019/pdf/5eU6DfQV/LTRSEC-2240-LG2.pdf