Question 1

What is the default action before identifying the URL during HTTPS inspection in Cisco Secure Firewall Threat Defense software?

Options :

A : reset

B : buffer

C : pass

D : drop

Answer: C

Question 2

An administrator wants to ensure that all endpoints are compliant before users are allowed access on the
corporate network. The endpoints must have the corporate antivirus application installed and be running the
latest build of Windows 10.
What must the administrator implement to ensure that all devices are compliant before they are allowed on the
network?

Options :

A : Cisco Identity Services Engine and AnyConnect Posture module

B : Cisco Stealthwatch and Cisco Identity Services Engine integration

C : Cisco ASA firewall with Dynamic Access Policies configured

D : Cisco Identity Services Engine with PxGrid services enabled

Answer: A

Question 3

An organization is selecting a cloud architecture and does not want to be responsible for patch management of the operating systems. Why should the organization select either Platform as a Service or Infrastructure as a Service for this environment?

Options :

A : Platform as a Service because the customer manages the operating system

B : Infrastructure as a Service because the customer manages the operating system

C : Platform as a Service because the service provider manages the operating system

D : Infrastructure as a Service because the service provider manages the operating system

Answer: B

Question 4

What is the purpose of the Cisco Endpoint IoC feature?

Options :

A : It is an incident response tool.

B : It provides stealth threat prevention.

C : It is a signature-based engine.

D : It provides precompromise detection.

Answer: A

Question 5

What is a benefit of performing device compliance?

Options :

A : Verification of the latest OS patches

B : Device classification and authorization

C : Providing multi-factor authentication

D : Providing attribute-driven policies

Answer: A