- (Exam Topic 1)
Which statement about the configuration of Cisco ASA NetFlow v9 Secure Event Logging is true?

1. A. To view bandwidth usage for NetFlow records, the QoS feature must be enabled.
2. B. A sysopt command can be used to enable NSEL on a specific interface.
3. C. NSEL can be used without a collector configured.
4. D. A flow-export event type must be defined under a policy

Correct Answer: D

- (Exam Topic 1)
Which capability is exclusive to a Cisco AMP public cloud instance as compared to a private cloud instance?

1. A. RBAC
2. B. ETHOS detection engine
3. C. SPERO detection engine
4. D. TETRA detection engine

Correct Answer: B

- (Exam Topic 3)
What is the purpose of a NetFlow version 9 template record?

1. A. It specifies the data format of NetFlow processes.
2. B. It provides a standardized set of information about an IP flow.
3. C. lt defines the format of data records.
4. D. It serves as a unique identification number to distinguish individual data records

Correct Answer: C

- (Exam Topic 3)
What are two functionalities of northbound and southbound APIs within Cisco SDN architecture? (Choose two.)

1. A. Southbound APIs are used to define how SDN controllers integrate with applications.
2. B. Southbound interfaces utilize device configurations such as VLANs and IP addresses.
3. C. Northbound APIs utilize RESTful API methods such as GET, POST, and DELETE.
4. D. Southbound APIs utilize CLI, SNMP, and RESTCONF.
5. E. Northbound interfaces utilize OpenFlow and OpFlex to integrate with network devices.

Correct Answer: CD

- (Exam Topic 2)
A network administrator is configuring a rule in an access control policy to block certain URLs and selects the “Chat and Instant Messaging” category. Which reputation score should be selected to accomplish this goal?

1. A. 1
2. B. 3
3. C. 5
4. D. 10

Correct Answer: D
We choose “Chat and Instant Messaging” category in “URL Category”:

To block certain URLs we need to choose URL Reputation from 6 to 10.