Question 1.
Which two are technologies that secure the control plane of the Cisco router? (Choose two.)

A. Cisco IOS Flexible Packet Matching
B. URPF
C. routing protocol authentication
D. CPPr
E. BPDU protection
F. role-based access control

Answer: C, D

Question 2.
HOTSPOT
This item contains three questions that you must answer. In order to answer the question, you need to examine the SDM screens by clicking on the SDM button to the left. View the question by clicking on the Questions button to the left. Then, choose the correct answer from among the options. 
Note: Not all SDM screen functions are implemented in this simulation. If a certain method to access the desired SDM is not available, please try to use an alternate method to access the required SDM screen to answer the question. 
 
 
 
 

Hotspot question. Click on the correct location or locations in the exhibit.

Answer:
 
 

Question 3.
What are the two category types associated with 5.x signature use in Cisco IOS IPS? (Choose two.)

A. basic
B. advanced
C. 128MB.sdf
D. 256MB.sdf
E. attack-drop
F. built-in

Answer: A, B

Question 4.
Refer to the exhibit.
 

Which optional AAA or RADIUS configuration command is used to support 802.1X guest VLAN functionality?

A. aaa authentication dot1x default group radius
B. aaa authorization network default group radius
C. aaa accounting dotlx default start-stop group radius
D. aaa accounting system default start-stop group radius
E. radius-server host 10.1.1.1 auth-port 1812 acct-port 1813

Answer: B

Question 5.
Which is an advantage of implementing the Cisco IOS Firewall feature? 

A. provides self-contained end-user authentication capabilities
B. integrates multiprotocol routing with security policy enforcement
C. acts primarily as a dedicated firewall device
D. is easily deployed and managed by the Cisco Adaptive Security Device Manager
E. provides data leakage protection capabilities

Answer: B

Question 6.
Which three statements correctly describe the GET VPN policy management? (Choose three.)

A. A central policy is defined at the ACS (AAA) server.
B. A local policy is defined on each group member.
C. A global policy is defined on the key server, and it is distributed to the group members.
D. The key server and group member policy must match.
E. The group member appends the global policy to its local policy.

Answer: B, C, E

Question 7.
HOTSPOT
This Item contains three questions that you must answer. You can view the question by clicking on the Questions button to the left. In order to answer the question, you need to examine the SDM screens by clicking on the SDM button to the left. View the question by clicking on the Questions button to the left. Then, choose the correct answer from among the options.
Note: Not all the SDM screen functions are implemented in this simulation. If a certain method to access the desired SDM screen is not available, please try to use an alternate method to access the required SDM screen to answer the question.
 
 
 

Hotspot question. Click on the correct location or locations in the exhibit.

Answer:
 

Question 8.
DRAG DROP
Drop
Match the Cisco IOS IPS SEAP feature on the left to its description on the right. Not all the features on the left are used.
Drag and drop question. Drag the items to the proper locations.
 

Answer:
 

Question 9.
The CPU and Memory Threshold Notifications of the Network Foundation Protection feature protect which router plane?

A. control plane
B. management plane
C. data plane
D. network plane

Answer: B

Question 10.
DRAG DROP
Drop
Match the Network Foundation Protection (NFP) feature on the left to where it is applied on the right.
 
Drag and drop question. Drag the items to the proper locations.

Answer:
 

Question 11.
DRAG DROP
Drop
Cisco IOS IPS can take specific actions when an active signature is detected. Match the actions on the left with the correct definition on the right.
 

Drag and drop question. Drag the items to the proper locations.

Answer:
 

	Web www.certsbraindumps.com