Cisco 500-651 Free Practice Questions 2021

NEW QUESTION 1
Which is a feature mentioned in the DNS security module?

• A. Layer-4 monitoring
• B. Umbrella
• C. Real-time sandboxing
• D. Data Loss Prevention

Answer: B

Explanation: ASAS Security Web and Email SE Module 2

NEW QUESTION 2
Which two Cisco solution are part of the Mobile threat centric solution? (Choose two.)

• A. Cisco AnyConnect
• B. Cisco Umbrella
• C. Cisco NGFW
• D. Cisco NGIPS
• E. Cisco Defense Orchestrator

Answer: AB

Explanation: ASAS Security Threat Centric Solutions - AM and SE Module 7

NEW QUESTION 3
Which two Cisco products are part of the mobile threat-centric solution module? (Choose two.)

• A. Advanced sandboxing with Threat Grid
• B. Automated policy enforcement with ASAv
• C. Enhanced control access with ISE and Cloudlock
• D. Software-defined segmentation through TrustSec
• E. Enforced device security policies with Meraki

Answer: CE

NEW QUESTION 4
Which three options does Cisco provides customers in terms of “Visibility and Control” against today's threats? (Choose three)

• A. Granular device visibility and management
• B. Unparalleled network and endpoint visibility
• C. 18-month device release cycle
• D. Bandwith Utilization Monitoring
• E. Comprehensive policy enforcement
• F. Fast device policy updates

Answer: ABF

NEW QUESTION 5
Which Cisco solution features recursive DNS capabilities?

• A. Cisco Defense Orchstrator
• B. Identity Services Engine
• C. Umbrella
• D. Cognitive Threat Analytics

Answer: C

Explanation: ASAS Security Web and Email SE Module 2

NEW QUESTION 6
Which are two key Cisco products that are part of the web threat-centric solution? (Choose two.)

• A. Cisco Defense Orchestrator
• B. Cisco Umbrella
• C. Cisco Identity Services Engine
• D. Cisco Web Security Appliance
• E. Cisco Email Security Appliance

Answer: BD

Explanation: ASAS Security Threat Centric Solutions - AM and SE Module 7

NEW QUESTION 7
How does AMP’s file reputation feature help customers?

• A. It automatically detects polymorphic variants of known malware
• B. It increases time to detection with exact data analytics
• C. It increases the protection to systems with exact fingerprinting
• D. It enables secure web browsing with cognitive threat analytics

Answer: A

NEW QUESTION 8
Which feature of ISE combines user identification with robust context sharing platform to prevent
inappropriate access?

• A. Centralized policy management
• B. Context-aware access
• C. Patch management
• D. Platform exchange grid

Answer: B

Explanation: ASAS Policy and Access SE Module 5

NEW QUESTION 9
Which are three key features of DNS-layer security? (Choose three.)

• A. Data Loss Prevention
• B. Retrospective Analysis
• C. Real-time sandboxing
• D. Provides visibility into all Internet activity
• E. Acts as first level of protection by providing security at DNS layer
• F. Resolves all DNS request through a single recursive DNS service

Answer: DEF

NEW QUESTION 10
Which are two main features of DDoS Attack Prevention? (Choose two)

• A. Block or allow traffic automatically
• B. Redirects DDoS traffic back to attacker
• C. Leveraging AMP ThreatGrid technology
• D. Stop attacks within seconds of detection

Answer: AD

NEW QUESTION 11
Which feature of CTA can separate statistically normal traffic form anomalous traffic?

• A. URL filtering
• B. Trust modeling
• C. Anomaly detection
• D. Event classification

Answer: C

Explanation: ASAS Security Advanced Threats SE Module 6

NEW QUESTION 12
Which are three main elements of the Cloud App Security? (Choose three.)

• A. Cloud Data Loss Prevention
• B. Rapid Breach Remediation
• C. User and Entity Behavior Analytics
• D. Apps Firewall
• E. DNS-Layer Protection

Answer: ADE

NEW QUESTION 13
What are three benefits that Cisco Umbrella brings to DNS-Layer Security? (Choose three.)

• A. Helps provide breach mitigation
• B. Blocks Domains/IPs associated with malware, phising, etc
• C. Delivers cloud based recursive DNS
• D. Provides profiling of devices
• E. Logs all internet activity
• F. Provides Sandboxing of malware

Answer: BCE

Explanation: ASAS Security Web and Email SE Module 2

NEW QUESTION 14
Which feature of Cisco AnyConnect allows pre-login authentication using windows machines, or single sign-on user authentication using Windows logon credentials?

• A. Secure Layer-2 Network Access
• B. Flexible AAA Options
• C. Differentiated Mobile Access
• D. Trusted Network Detection

Answer: A

Explanation: ASAS Policy and Access SE Module 5

NEW QUESTION 15
Which three NGFW and NGIPS features support the 'Complex Remote Access' use case? (Choose three.)

• A. Support for device onboarding
• B. Users protected regardless of physical location
• C. Fuzzy Fingerprinting
• D. Detection of anomalous traffic
• E. Controls and protections extended beyond VPN controls
• F. Secure access extended to all users

Answer: BEF

Explanation: ASAS Security NGFW and NGIPS SE Module 4

NEW QUESTION 16
Which are two main features of Advanced Malware Protection? (Choose two.)

• A. Rapid App Containment
• B. Leverages Global Threat Intelligence to provide zero-day protection
• C. Threat protection across the entire attack continuum
• D. User and Entity Behavior Analytics

Answer: BC

Explanation: ASAS Security Advanced Threats SE Module 6

NEW QUESTION 17
Which three features provided by NGFW and NGIPS support the 'Internet Edge" use case? (Choose three.)

• A. Supports High Availability
• B. Support for profiling devices
• C. Supports dynamic routing protocols such as OSPF or BGP
• D. Support for Platform exchange grid
• E. Support for High Bandwith environments
• F. Support for integrated posture assessment

Answer: ACE

Explanation: ASAS Security NGFW and NGIPS SE Module 4