Cisco 500-651 Study Guides 2021

NEW QUESTION 1
Which are two main features of Intrusion Prevention? (Choose two.)

• A. Threat analysis through network behavior analysis
• B. Protecting against Zero-Day attacks
• C. Layer-4 traffic monitoring across platforms
• D. Vulnerability-based threat management

Answer: AD

NEW QUESTION 2
Which is a feature of E-mail Security?

• A. Layer-4 Monitoring
• B. UmbrellaC Outbreak Filters
• C. Investigate

Answer: C

NEW QUESTION 3
Which three values are provided by NGFW and NGIPS in the “Campus NGFW”? (Choose three.)

• A. Dynamic routing port to meet all network needs.
• B. Differentiated Mobile Access
• C. Additional firewalls across all platforms
• D. High throughput maintained while still protecting domain against threats
• E. Identity Services Engine
• F. Flexible AAA Options

Answer: ABD

NEW QUESTION 4
Which are two main features of ASAv and NGFWv? (Choose two.)

• A. File trajectory
• B. API-based management
• C. File reputation
• D. Agile provisioning

Answer: BD

Explanation: ASAS Security NGFW and NGIPS SE Module 4

NEW QUESTION 5
Which TrustSec feature allows customers to simplify firewall administration, avoiding the common rule explosions that happen when new servers are onboarded?

• A. Firewall administration
• B. Push policies
• C. Traffic tagging
• D. Regulate access

Answer: C

Explanation: ASAS policy and Access SE Module 5

NEW QUESTION 6
Which feature in the DNS security module provide on and off network DNS protection?

• A. Umbrella
• B. Layer-4 monitoring
• C. Real-time sandboxing
• D. Data Loss Prevention

Answer: A

NEW QUESTION 7
Which feature of ISE is Terminal Access Control System (TACACS) a part of?

• A. Device Administration
• B. Device Profiling
• C. Centralized policy management
• D. Guest access management

Answer: A

Explanation: ASAS Policy and Access SE Module 5

NEW QUESTION 8
What are three main challenges addressed by Cisco's cloud delivered security solutions? (Choose three.)

• A. Threats are becoming too advanced tor traditional hardware
• B. Solutions often require frequent hardware updates
• C. Employees are unable to work remotely
• D. Businesses are using email too frequently
• E. Frequently installing new servers, appliances, and devices adds to the maintenance workload
• F. IT staff must continuously grow with additional specializations to address the solutions

Answer: BEF

Explanation: ASAS Cisco Cloud Security SE - Module 3

NEW QUESTION 9
Which feature discovers and controls malicious cloud apps connected to the corporate environ merit?

• A. Umbrella
• B. Cognitive Threat Analytics
• C. Cloudlock
• D. Investigate

Answer: C

Explanation: Cisco Cloudlock Apps Firewall discovers and controls malicious cloud apps connected to your corporate environment, and provides the world’s largest crowd-sourced security solution to identify individual app risk, using our Community Trust Rating.

NEW QUESTION 10
Which Cisco solution falls under cloud security?

• A. Umbrella
• B. Identity Services Engine
• C. Firepower Threat Defense
• D. Cisco Defense Orchestrator

Answer: D

Explanation: ASAS Cisco Cloud Security SE – Module 3

NEW QUESTION 11
Which is a component of Cisco's Web and E-mail Security Solution?

• A. Device Profiling
• B. Next Generation Intrusion Prevention System
• C. Next Generation Firewall
• D. DNS-Layer security

Answer: D

Explanation: ASAS Security Web and Email SE Module 2

NEW QUESTION 12
Which is a key feature of Cisco Defense Orchestra?

• A. Profiles devices connected to customer s network
• B. Orchestrates security policy management form one place
• C. Consolidates configuration management
• D. Protects customers network against zero-day attacks

Answer: B

NEW QUESTION 13
What is a key difference between Basic Data Loss Prevention and Advanced Data Loss Prevention?

• A. Providing content analysis
• B. Instant visibility
• C. Dynamic outbreak considerations
• D. Ability to filter in real-time

Answer: C

NEW QUESTION 14
Which of AMP’s File capabilities deals with the problem of files passing through perimeter defenses that are later discovered to be a threat?

• A. Dynamic Analytics
• B. Trajectory
• C. Malware Security
• D. File Retrospection

Answer: D

Explanation: Tracks the spread of any file within your network and continuously monitors file reputation over time. If a file reputation changes to malicious or is found by file sandboxing to be malicious, AMP provides retrospective alerting in the after phase. AMP identifies every instance of the file within your network to address the problem of malicious files passing through perimeter defenses that are later deemed a threat.

NEW QUESTION 15
Which three Cisco solutions are covered in the Advanced Threat module? (Choose three.)

• A. Cognitive Threat Analytics
• B. Intrusion Analytics
• C. AMP
• D. Cisco Defense Orchestrator
• E. NGIPS
• F. Cisco ThreatGrid

Answer: ACF

Explanation: ASAS Security Advanced Threats SE Module 6

NEW QUESTION 16
What feature of Anti-Spam Defense determines the reputation of an e-mail?

• A. IP addresses
• B. Threat analysis
• C. Context analysis
• D. Encryption score

Answer: C

NEW QUESTION 17
Which three options ate attack vectors protected by DNS-Layer security? (Choose three.)

• A. Voicemail
• B. Backups
• C. Web
• D. E-mail
• E. Cloud apps
• F. Video Surveil lance

Answer: CDE

Explanation: ASAS Security Threat Centric Solutions - AM and SE Module 7