VCE 2 Pass

Question No. 1

A Cisco ASA is configured for TLS proxy. When should the security appliance force remote IP phones connecting to the phone proxy through the internet to be in secured mode?

• A. When the Cisco Unified Communications Manager cluster is in non-secure mode
• B. When the Cisco Unified Communications Manager cluster is in secure mode only
• C. When the Cisco Unified Communications Manager is not part of a cluster
• D. When the Cisco ASA is configured for IPSec VPN

Question No. 2

For which purpose is the Cisco ASA CLI command aaa authentication match used?

• A. Enable authentication for SSH and Telnet connections to the Cisco ASA appliance.
• B. Enable authentication for console connections to the Cisco ASA appliance.
• C. Enable authentication for connections through the Cisco ASA appliance.
• D. Enable authentication for IPsec VPN connections to the Cisco ASA appliance.
• E. Enable authentication for SSL VPN connections to the Cisco ASA appliance.
• F. Enable authentication for Cisco ASDM connections to the Cisco ASA appliance.

Question No. 3

What are two security features at the access port level that can help mitigate Layer 2 attacks? (Choose two.)

• A. DHCP snooping
• B. IP Source Guard
• C. Telnet
• D. Secure Shell
• E. SNMP

Question No. 4

The Cisco ASA must support dynamic routing and terminating VPN traffic. Which three Cisco ASA options will not support these requirements? (Choose three.)

• A. transparent mode
• B. multiple context mode
• C. active/standby failover mode
• D. active/active failover mode
• E. routed mode
• F. no NAT-control

Question No. 5

When configuring a new context on a Cisco ASA device, which command creates a domain for the context?

• A. domain config name
• B. domain-name
• C. changeto/domain name change
• D. domain context 2

Question No. 6

Which two values must you provide when you use a CSV file to import devices into Cisco Prime infrastructure ? Choose two.)

• A. Device IP address
• B. EtherType filed
• C. Device model number
• D. SNMP version
• E. Device serial number

Question No. 7

Which Cisco TrustSec role does a Cisco ASA firewall serve within an identity architecture?

• A. Access Requester
• B. Policy Decision Point
• C. Policy Information Point
• D. Policy Administration Point
• E. Policy Enforcement Point

Question No. 8

Which three commands can be used to harden a switch? (Choose three.)

• A. switch(config-if)# spanning-tree bpdufilter enable
• B. switch(config)# ip dhcp snooping
• C. switch(config)# errdisable recovery interval 900
• D. switch(config-if)# spanning-tree guard root
• E. switch(config-if)# spanning-tree bpduguard disable
• F. switch(config-if)# no cdp enable

Question No. 9

Which option lists cloud deployment models?

• A. Private, public, hybrid, shared
• B. Private, public, hybrid
• C. IaaS, PaaS, SaaS
• D. Private, public, hybrid, community

Question No. 10

Which two mandatory policies are needed to support a regular IPsec VPN in a Cisco Security Manager

environment? (Choose two.)

• A. GRE modes
• B. IKE proposal
• C. group encryption
• D. server load balance