NetSec Exam 2 A+ Pass Verified

NetSec Exam 2 A+ Pass Verified The_____________ action in a Cisco IOS Zone-Based Policy Firewall is similar to a deny statement in an ACL. - Answer- Drop Which two Cisco IOS commands are required to enable IPS SDEE message logging? (Choose two.) - Answer- ip http server ip ips notify sdee Which two types of addresses should be denied inbound on a router interface that attaches to the Internet? (Choose two.) - Answer- any IP address that starts with the number 127 Private ip addresses What is the default configuration of the PVLAN Edge feature on a Cisco switch? - Answer- No ports are defined as protected What is the only type of traffic that is forwarded by a PVLAN protected port to other protected ports? - Answer- control Which security solution provides continuous visibility and control before, during, and after an attack to defeat malware across the extended network of an organization? - Answer- AMP Which Cisco IPS feature�allows for�regular threat updates from the Cisco SensorBase Network database? - Answer- global correlation Which two files could be used to implement Cisco IOS IPS with version 5.x format signatures? (Choose two.) - Answer- IOS-Sxxx-CLI.pkg With IP voice systems on data networks, which two types of attacks target VoIP specifically? (Choose two.) - Answer- vishing SPIT The inspect action in a Cisco IOS Zone-Based Policy Firewall configures Cisco IOS ______________ packet inspection. - Answer- active Which protocol is used when an IPS sends signature alarm messages? - Answer- SDEE Refer to the exhibit. When modifying an IPS signature action, which two check boxes should be selected to create an ACL that denies all traffic from the IP address that is considered the source of the attack and drops the packet and all future packets from the TCP flow? (Choose two.) - Answer- Deny Attacker inline Deny connection inline Which statement is true about an atomic alert that is generated by an IPS? - Answer- It is an alert that is generated every time a specific signature has been found. Which three are SAN transport technologies? (Choose three.) - Answer- FCIP Fibre Channel iSCSI Which ICMP message type should be stopped inbound? - Answer- echo What mitigation plan is best for thwarting a DoS attack that is creating a switch buffer overflow? - Answer- Enable port security When the Cisco NAC appliance evaluates an incoming connection from a remote device against the defined network policies, what feature is being used? - Answer- Layer 2 Which two methods are used to mitigate VLAN attacks? (Choose two. - Answer- Disabling DTP autonegotiation on all trunk ports Using a dummy VLAN for the native Vlan What is one advantage of using a next-generation firewall rather than a stateful firewall? - Answer- proactive rather than reactive protection from Internet threats Which statement is true about a characteristic of the PVLAN Edge feature on a Cisco switch? - Answer- all data that passes between protected ports must be forwarded through a layer 3 device When implementing an inbound Internet traffic ACL, what should be included to prevent the spoofing of internal networks? - Answer- ACEs to prevent traffic from private address spaces