Category: Cisco Exam

December/2021 Latest Braindump2go 300-710 Exam Dumps with PDF and VCE Free Updated Today! Following are some new 300-710 Real Exam Questions!

QUESTION 174
An engineer must define a URL object on Cisco FMC.
What is the correct method to specify the URL without performing SSL inspection?

A. Use Subject Common Name value.
B. Specify all subdomains in the object group.
C. Specify the protocol in the object.
D. Include all URLs from CRL Distribution Points.

Answer: A

» Read more

November/2021 Latest Braindump2go 300-425 Exam Dumps with PDF and VCE Free Updated Today! Following are some new 300-425 Real Exam Questions!

QUESTION 114
An engineer must repurpose a lab WLC appliance for use in the production environment of the enterprise. After the new WLC is configured with the information of the other WLC, the mobility tunnels are still not coming up. What is the reason?

A. A firewall is blocking UDP port 16667 between the WLCs.
B. The WLC management interfaces are in the same VLAN.
C. The hardware platform is incompatible.
D. The mobility groups are different.

Answer: D

» Read more

November/2021 Latest Braindump2go 350-201 Exam Dumps with PDF and VCE Free Updated Today! Following are some new 350-201 Real Exam Questions!

QUESTION 106
An analyst wants to upload an infected file containing sensitive information to a hybrid-analysis sandbox. According to the NIST.SP 800-150 guide to cyber threat information sharing, what is the analyst required to do before uploading the file to safeguard privacy?

A. Verify hash integrity.
B. Remove all personally identifiable information.
C. Ensure the online sandbox is GDPR compliant.
D. Lock the file to prevent unauthorized access.

Answer: B

» Read more

November/2021 Latest Braindump2go 300-415 Exam Dumps with PDF and VCE Free Updated Today! Following are some new 300-415 Real Exam Questions!

QUESTION 155
To configure file analysis for Advanced Malware Protection, which tasks are valid? (Choose three.)

A. Configure Threat Grid API key.
B. Configure file types list.
C. Enable file analysis.
D. Enable HTTPS inbound to the WAN Edge router.
E. Configure a security rule for Threat Grid.

Answer: ABC

» Read more

October/2021 Latest Braindump2go 300-815 Exam Dumps with PDF and VCE Free Updated Today! Following are some new 300-815 Real Exam Questions!

QUESTION 105
The SIP session refresh timer allows the RTP session to stay active during an active call. The Cisco UCM sends either SIP-INVITE or SIP-UPDATE messages in a regular interval of time throughout the active duration of the call. During a troubleshooting session, the engineer finds that the Cisco UCM is sending SIP-UPDATE as the SIP session refresher, and the engineer would like to use SIP-INVITE as the session refresher.
What configuration should be made in the Cisco UCM to achieve this?

A. Enable SIP ReMXX Options on the SIP profile.
B. Enable Send send-receive SDP in mid-call INVITE on the SIP profile.
C. Change Session Refresh Method on the SIP profile to INVITE.
D. Increase Retry INVITE to 20 seconds on the SIP profile.

Answer: C

» Read more

October/2021 Latest Braindump2go 300-430 Exam Dumps with PDF and VCE Free Updated Today! Following are some new 300-430 Real Exam Questions!

QUESTION 151
After receiving an alert about a rogue AP, a network engineer logs into Cisco Prime Infrastructure and looks at the floor map where the AP that detected the rogue is located. The map is synchronized with a mobility services engine that determines that the rogue device is actually inside the campus. The engineer determines that the rogue is a security threat and decides to stop if from broadcasting inside the enterprise wireless network. What is the fastest way to disable the rogue?

A. Go to the location where the rogue device is indicated to be and disable the power.
B. Create an SSID similar to the rogue to disable clients from connecting to it.
C. Update the status of the rogue in Cisco Prime Infrastructure to contained.
D. Classify the rogue as malicious in Cisco Prime Infrastructure.

Answer: C

» Read more

September/2021 Latest Braindump2go 350-401 Exam Dumps with PDF and VCE Free Updated Today! Following are some new 350-401 Real Exam Questions!

QUESTION 516
Refer to the exhibit. Which command is required to verify NETCONF capability reply messages?

A. show netconf | section rpc-reply
B. show netconf rpc-reply
C. show netconf xml rpc-reply
D. show netconf schema | section rpc-reply

Answer: A

» Read more

September/2021 Latest Braindump2go 300-710 Exam Dumps with PDF and VCE Free Updated Today! Following are some new 300-710 Real Exam Questions!

QUESTION 155
Within an organization’s high availability environment where both firewalls are passing traffic, traffic must be segmented based on which department it is destined for. Each department is situated on a different LAN. What must be configured to meet these requirements?

A. redundant interfaces
B. span EtherChannel clustering
C. high availability active/standby firewalls
D. multi-instance firewalls

Answer: D

» Read more

September/2021 Latest Braindump2go 200-201 Exam Dumps with PDF and VCE Free Updated Today! Following are some new 200-201 Real Exam Questions!

QUESTION 172
The SOC team has confirmed a potential indicator of compromise on an endpoint. The team has narrowed the executable file’s type to a new trojan family.
According to the NIST Computer Security Incident Handling Guide, what is the next step in handling this event?

A. Isolate the infected endpoint from the network.
B. Perform forensics analysis on the infected endpoint.
C. Collect public information on the malware behavior.
D. Prioritize incident handling based on the impact.

Answer: C

» Read more

August/2021 Latest Braindump2go 300-410 Exam Dumps with PDF and VCE Free Updated Today! Following are some new 300-410 Real Exam Questions!

QUESTION 207
Refer to the exhibit. Bangkok is using ECMP to reach to the 192.168.5.0/24 network.
The administrator must configure Bangkok in such a way that Telnet traffic from 192.168.3.0/24 and192.168.4.0/24 networks uses the HongKong router as the preferred router.
Which set of configurations accomplishes this task?
 

A.    access-list 101 permit tcp 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255
access-list 101 permit tcp 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.255 !
route-map PBR1 permit 10
match ip address 101
set ip next-hop 172.18.1.2
interface Ethernet0/3
ip policy route-map PBR1
B.    access-list 101 permit tcp 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23
access-list 101 permit tcp 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23 !
route-map PBR1 permit 10
match ip address 101
set ip next-hop 172.18.1.2
interface Ethernet0/1
ip policy route-map PBR1
C.    access-list 101 permit tcp 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23
access-list 101 permit tcp 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23 !
route-map PBR1 permit 10
match ip address 101
set ip next-hop 172.18.1.2
!
interface Ethernet0/3
ip policy route-map PBR1
D.    access-list 101 permit tcp 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255
access-list 101 permit tcp 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.255 !
route-map PBR1 permit 10
match ip address 101
set ip next-hop 172.18.1.2
!
interface Ethernet0/1
ip policy route-map PBR1

Answer: C
Explanation:
We need to use Policy Based Routing (PBR) here on Bangkok router to match the traffic from 192.168.3.0/24 & 192.168.4.0/24 and “set ip next-hop” to HongKong router(172.18.1.2 in this case). Note: Please notice that we have to apply the PBR on incoming interface e0/3 to receive traffic from 192.168.3.0/24 and 192.168.4.0/24.

» Read more

August/2021 Latest Braindump2go 300-720 Exam Dumps with PDF and VCE Free Updated Today! Following are some new 300-720 Real Exam Questions!

QUESTION 87
Refer to the exhibit. Which configuration on the scan behavior must be updated to allow the attachment to be scanned on the Cisco ESA?
 
 

A.    Add an additional mapping for attachment type for zip files.
B.    Enable assume match pattern if the email was not scanned for any reason.
C.    Increase the maximum recursion depth from 5 to a larger value.
D.    Increase the maximum attachment size to scan to a larger value.

Answer: A

» Read more

July/2021 Latest Braindump2go 300-610 Exam Dumps with PDF and VCE Free Updated Today! Following are some new 300-610 Real Exam Questions!

QUESTION 117
Refer to the exhibit. A high-availability setup for iSCSI is designed with the host running ISCSI software. Each storage port on the MDS exports the same two Fibre Channel target ports with different ISCSI target names. In this design, how many ISCSI session are created from the host so that recovery occurs if any component fails?

A. 2
B. 3
C. 4
D. 5

Answer: C
Explanation:
https://www.cisco.com/en/US/docs/storage/san_switches/mds9000/sw/rel_3_x/configuration/guides/fm_3_2/ciscsi.html

» Read more

June/2021 Latest Braindump2go 300-730 Exam Dumps with PDF and VCE Free Updated Today! Following are some new 300-730 Real Exam Questions!

QUESTION 86
Which two NHRP functions are specific to DMVPN Phase 3 implementation? (Choose two.)

A. registration reply
B. redirect
C. resolution reply
D. registration request
E. resolution request

Answer: BC

» Read more

June/2021 Latest Braindump2go 200-301 Exam Dumps with PDF and VCE Free Updated Today! Following are some new 200-301 Real Exam Questions!

QUESTION 456
What are two characteristics of the distribution layer in a three-tier network architecture? (Choose two.)

A. serves as the network aggregation point
B. provides a boundary between Layer 2 and Layer 3 communications
C. designed to meet continuous, redundant uptime requirements
D. is the backbone for the network topology
E. physical connection point for a LAN printer

Answer: BC

» Read more