Category: 640-554 DUMPS

EnsurepassQUESTION  111 Scenario: You are the security admin for a small company. This morning your manager has supplied you with a list of Cisco ISR and CCP configuration QUESTION s. Using CCP, your job is to navigate the pre-configured CCP in order to find answers to your business QUESTION . What is included in the Network Object Group INSIDE? (Choose two)     A.      Network 192.168.1.0/24 B.      Read more […] Read more »

EnsurepassQUESTION  101 Drag and Drop Refer to the exhibit. Drag the port(s) from the left and drop them on the correct STP roles on the right. Not all options on the left are used.       Correct Answer:     QUESTION  102 Drag and Drop   Correct Answer:           QUESTION  103 Drag and Drop   Correct Answer:           QUESTION  104 Drag Read more […] Read more »

EnsurepassQUESTION  91 Which option is a characteristic of a stateful firewall?   A.      can analyze traffic at the application layer B.      allows modification of security rule sets in real time to allow return traffic C.      will allow outbound communication, but return traffic must be explicitly permitted D.      supports user authentication   Correct Answer: B   Read more […] Read more »

EnsurepassQUESTION  81 Which type of security control is defense in depth?   A.      threat mitigation B.      risk analysis C.      botnet mitigation D.      overt and covert channels   Correct Answer: A     QUESTION  82 Which two options are two of the built-in features of IPv6? (Choose two.)   A.      VLSM Read more […] Read more »

EnsurepassQUESTION  71 Which Cisco IPS product offers an inline, deep-packet inspection feature that is available in integrated services routers?   A.      Cisco iSDM B.      Cisco AIM C.      Cisco IOS IPS D.      Cisco AIP-SSM   Correct Answer: C   QUESTION  72 Which three modes of access can be delivered by SSL VPN? (Choose three.)   A.      Read more […] Read more »

EnsurepassQUESTION  61 Which option represents a step that should be taken when a security policy is developed?   A.      Perform penetration testing. B.      Determine device risk scores. C.      Implement a security monitoring system. D.      Perform quantitative risk analysis.   Correct Answer: D     QUESTION  62 Which type of network masking Read more […] Read more »

EnsurepassQUESTION  51 Which two options are characteristics of the Cisco Configuration Professional Security Audit wizard? (Choose two.)   A.      displays a screen with fix-it check boxes to let you choose which potential security-related configuration changes to implement B.      has two modes of operation: interactive and non-interactive C.      automatically enables Cisco IOS firewall and Cisco IOS IPS Read more […] Read more »

EnsurepassQUESTION  41 Which IPS technique commonly is used to improve accuracy and context awareness, aiming to detect and respond to relevant incidents only and therefore, reduce noise?   A.      attack relevancy B.      target asset value C.      signature accuracy D.      risk rating   Correct Answer: D     QUESTION  42 Which two statements Read more […] Read more »

EnsurepassQUESTION  31 Which two options are advantages of an application layer firewall? (Choose two.)   A.      provides high-performance filtering B.      makes DoS attacks difficult C.      supports a large number of applications D.      authenticates devices E.       authenticates individuals   Correct Answer: BE   QUESTION Read more […] Read more »

EnsurepassQUESTION  21 Which router management feature provides for the ability to configure multiple administrative views?   A.      role-based CLI B.      virtual routing and forwarding C.      secure config privilege {level} D.      parser view view name   Correct Answer: A         QUESTION  22 You suspect that an attacker in your network has Read more […] Read more »

EnsurepassQUESTION  11 Which two characteristics of the TACACS+ protocol are true? (Choose two.)   A.      uses UDP ports 1645 or 1812 B.      separates AAA functions C.      encrypts the body of every packet D.      offers extensive accounting capabilities E.       is an open RFC standard protocol   Correct Answer: BC     Read more […] Read more »

EnsurepassQUESTION  1 Which two features are supported by Cisco IronPort Security Gateway? (Choose two.)   A.      spam protection B.      outbreak intelligence C.      HTTP and HTTPS scanning D.      email encryption E.       DDoS protection   Correct Answer: AD     QUESTION  2 Which option is a feature of Cisco Read more […] Read more »