Cisco 300-465 Online Practice Questions and Exam Preparation

Cisco 300-465 Online Questions & Answers

• Question 81:

  Which solution provides centralized automation and policy-driven application profiles?

  A. APIC
  B. OpenDaylight
  C. VACS
  D. CML
  A. APIC

  ---

  Reference: https://www.sdxcentral.com/resources/cisco/what-is-cisco-apic/

• Question 82:

  A customer that is hosting a multitenant environment is implementing a security framework to harden the environment. The engineer has employed some best practices to enforce AIC and AAA throughput the environment.

  Which two best practices must the cloud professional use to enforce authorization? (Choose two.)

  A. security guards
  B. separation of duty
  C. biometric scanners
  D. cameras
  E. wire fencing
  B. separation of duty
  C. biometric scanners

• Question 83:

  Which large-scale Layer 2 connectivity protocol is best for VLAN address space that is limited in large networks?

  A. VXLAN
  B. OTV
  C. LISP
  D. VPN
  E. NvGRE
  A. VXLAN

• Question 84:

  Which three options describe how isolation can be achieved for VMDC data center security? (Choose three.)

  A. access control lists
  B. intrusion prevention appliances that inspect traffic and detect security events on a -VLAN basis
  C. proper infrastructure hardening
  D. role-based access and authentication
  E. application redundancy
  F. policy enforcement and access control
  G. virtual routing and forwarding tables
  A. access control lists
  B. intrusion prevention appliances that inspect traffic and detect security events on a -VLAN basis
  G. virtual routing and forwarding tables

  ---

  Isolation provides a secure foundation for multi-tenant data centers and server farms. Depending on the design goals, isolation can be achieved using firewalls; access control lists (ACLs); virtual LANs (VLANs), Virtual Routing and Forwarding tables (VRFs), virtualization, storage networks, and physical separation. In addition, Intrusion Prevention appliances that can inspect traffic and detect security events on a per-VLAN basis can provide an additional level of threat isolation between different tenants. When combined, these can provide appropriate levels of security enforcement to server applications and services for multiple tenants.

  Reference: http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Data_Center/VMDC/Cloud_Security/1-0/DG/ICSecurity/ICSecurity2.html

• Question 85:

  A cloud administrator is considering deep packet inspection to secure the cloud infrastructure.

  Which three statements about DPI are true? (Choose three.)

  A. The use of DPI makes it possible to find, identify, classify, reroute, or block packets with specific data or code payloads.
  B. DPI does not require updates and revisions to remain optimally effective.
  C. DPI is an advanced method of packet filtering that functions at the application layer of the OSI.
  D. DPI examines only packet headers.
  E. DPI is essential in protecting the cloud against malicious threats such as web exploits, zeroday attacks, data exfiltration, and malware-based botnets.
  F. DPI can increase computer speed because it decreases the burden on the processor.
  A. The use of DPI makes it possible to find, identify, classify, reroute, or block packets with specific data or code payloads.
  C. DPI is an advanced method of packet filtering that functions at the application layer of the OSI.
  E. DPI is essential in protecting the cloud against malicious threats such as web exploits, zeroday attacks, data exfiltration, and malware-based botnets.

• Question 86:

  Which hypervisor supports VM Lockstep Protection?

  A. VMWare
  B. HyperV
  C. Oracle
  D. Citrix
  A. VMWare

• Question 87:

  An IT Director recently discovered that developers have been leveraging public cloud resources to bypass the lengthy IT processes that are currently in place.

  Which tool lowers this cost and improves internal efficiencies?

  A. software-denied infrastructure
  B. RESTful APIs
  C. Python scripting
  D. OpenStack Neutron
  E. self-service catalog
  A. software-denied infrastructure

• Question 88:

  From which module must a manager or supervisor review and authorize the service when an end user submits an order in the prime service catalog?

  A. Order Management
  B. Service Request
  C. Requisition
  D. Administration
  A. Order Management

  ---

  end user, a manager or supervisor must review and authorize the service from the Order Management module

  Reference: http://www.cisco.com/c/en/us/td/docs/net_mgmt/datacenter_mgmt/intel_auto/service_portal/v_11_0/user/guide/CiscoPrimeServiceCatalog-11-0-UserGuide/CiscoPrimeServiceCatalog-10-1-UserGuide_chapter_010.html

• Question 89:

  A security architect wants to prevent the introduction of a rogue DHCP server. Prevention of this issue occurs at which layer of the Cisco VMDC Cloud Security solution framework?

  A. aggregation layer
  B. virtual access layer
  C. access layer
  D. services layer
  E. WAN/edge layer
  C. access layer

• Question 90:

  A cloud administrator is considering storage for a deployment. The admin needs a solution that is durable and reliable and fits the need for storing media, web assets, and backups. Which solution meets this need the best?

  A. cloud file storage
  B. cloud block storage
  C. cloud hybrid storage
  D. cloud NFS storage
  C. cloud hybrid storage