New Updated Cisco CCNA Security 640-554 Real Exam Download 171-180

Ensurepass QUESTION 171 Which two statements about IPv6 access lists are true? (Choose two).   A.      IPv6 access lists support numbered access lists. B.      IPv6 access lists support wildcard masks. C.      IPv6 access lists support standard access lists. D.      IPv6 Read More …

New Updated Cisco CCNA Security 640-554 Real Exam Download 161-170

Ensurepass QUESTION 161 Which three applications comprise Cisco Security Manager? (Choose three.)   A.      Configuration Manager B.      Packet Tracer C.      Device Manager D.      Event Viewer E.       Report Manager F.       Syslog Monitor   Correct Answer: ADE     QUESTION 162 When Read More …

New Updated Cisco CCNA Security 640-554 Real Exam Download 151-160

Ensurepass QUESTION 151 In a brute-force attack, what percentage of the keyspace must an attacker generally search through until he or she finds the key that decrypts the data?   A.      Roughly 50 percent B.      Roughly 66 percent C.      Roughly Read More …

New Updated Cisco CCNA Security 640-554 Real Exam Download 141-150

Ensurepass QUESTION 141 With Cisco IOS Zone-Based Policy Firewall, where is the inspection policy applied?   A.      to the zone B.      to the zone-pair C.      to the interface D.      to the global service policy   Correct Answer: B     Read More …

New Updated Cisco CCNA Security 640-554 Real Exam Download 131-140

Ensurepass QUESTION 131 Refer to the exhibit. Which statement is correct based on the show login command output shown?     A.      When the router goes into quiet mode, any host is permitted to access the router via Telnet, SSH, Read More …

New Updated Cisco CCNA Security 640-554 Real Exam Download 121-130

Ensurepass QUESTION 121 DRAG DROP   Correct Answer:     QUESTION 122 DRAG DROP   Correct Answer:     QUESTION 123 DRAG DROP   Correct Answer:     QUESTION 124 DRAG DROP   Correct Answer:     QUESTION 125 DRAG Read More …

New Updated Cisco CCNA Security 640-554 Real Exam Download 111-120

Ensurepass QUESTION 111 Scenario: You are the security admin for a small company. This morning your manager has supplied you with a list of Cisco ISR and CCP configuration questions. Using CCP, your job is to navigate the pre-configured CCP Read More …

New Updated Cisco CCNA Security 640-554 Real Exam Download 101-110

Ensurepass QUESTION 101 DRAG DROP Refer to the exhibit. Drag the port(s) from the left and drop them on the correct STP roles on the right. Not all options on the left are used.     Correct Answer:     Read More …

New Updated Cisco CCNA Security 640-554 Real Exam Download 91-100

Ensurepass QUESTION 91 Which option is a characteristic of a stateful firewall?   A.      can analyze traffic at the application layer B.      allows modification of security rule sets in real time to allow return traffic C.      will allow outbound communication, Read More …

New Updated Cisco CCNA Security 640-554 Real Exam Download 81-90

Ensurepass QUESTION 81 Which type of security control is defense in depth?   A.      threat mitigation B.      risk analysis C.      botnet mitigation D.      overt and covert channels   Correct Answer: A     QUESTION 82 Which two options are two Read More …

New Updated Cisco CCNA Security 640-554 Real Exam Download 71-80

Ensurepass QUESTION 71 Which Cisco IPS product offers an inline, deep-packet inspection feature that is available in integrated services routers?   A.      Cisco iSDM B.      Cisco AIM C.      Cisco IOS IPS D.      Cisco AIP-SSM   Correct Answer: C     Read More …

New Updated Cisco CCNA Security 640-554 Real Exam Download 61-70

Ensurepass QUESTION 61 Which option represents a step that should be taken when a security policy is developed?   A.      Perform penetration testing. B.      Determine device risk scores. C.      Implement a security monitoring system. D.      Perform quantitative risk analysis.   Read More …

New Updated Cisco CCNA Security 640-554 Real Exam Download 51-60

Ensurepass QUESTION 51 Which two options are characteristics of the Cisco Configuration Professional Security Audit wizard? (Choose two.)   A.      displays a screen with fix-it check boxes to let you choose which potential security-related configuration changes to implement B.      has Read More …

New Updated Cisco CCNA Security 640-554 Real Exam Download 41-50

Ensurepass QUESTION 41 Which IPS technique commonly is used to improve accuracy and context awareness, aiming to detect and respond to relevant incidents only and therefore, reduce noise?   A.      attack relevancy B.      target asset value C.      signature accuracy D.      Read More …

New Updated Cisco CCNA Security 640-554 Real Exam Download 31-40

Ensurepass QUESTION 31 Which two options are advantages of an application layer firewall? (Choose two.)   A.      provides high-performance filtering B.      makes DoS attacks difficult C.      supports a large number of applications D.      authenticates devices E.       authenticates individuals   Correct Read More …

New Updated Cisco CCNA Security 640-554 Real Exam Download 21-30

Ensurepass QUESTION 21 Which router management feature provides for the ability to configure multiple administrative views?   A.      role-based CLI B.      virtual routing and forwarding C.      secure config privilege {level} D.      parser view view name   Correct Answer: A   Read More …

New Updated Cisco CCNA Security 640-554 Real Exam Download 11-20

Ensurepass QUESTION 11 Which two characteristics of the TACACS+ protocol are true? (Choose two.)   A.      uses UDP ports 1645 or 1812 B.      separates AAA functions C.      encrypts the body of every packet D.      offers extensive accounting capabilities E.       is Read More …

New Updated Cisco CCNA Security 640-554 Real Exam Download 1-10

Ensurepass QUESTION 1 Which two features are supported by Cisco IronPort Security Gateway? (Choose two.)   A.      spam protection B.      outbreak intelligence C.      HTTP and HTTPS scanning D.      email encryption E.       DDoS protection   Correct Answer: AD     QUESTION Read More …