Cisco 500-651 Online Practice Questions and Exam Preparation

Cisco 500-651 Online Questions & Answers

• Question 21:

  What are two main features of enabling Cloudlock in a customer's environment? (Choose two)

  A. Cloudlock connects via Oauth
  B. Cloud App security works on plug-in
  C. Easily creates network lags for different users
  D. It takes less than five minutes to enable per platform
  E. Protects against cloud-native malware
  A. Cloudlock connects via Oauth
  E. Protects against cloud-native malware

• Question 22:

  Which three values are provided by NGFW and NGIPS in the "Campus NGFW"? (Choose three.)

  A. Dynamic routing port to meet all network needs.
  B. Differentiated Mobile Access
  C. Additional firewalls across all platforms
  D. High throughput maintained while still protecting domain against threats
  E. Identity Services Engine
  F. Flexible AAA Options
  A. Dynamic routing port to meet all network needs.
  B. Differentiated Mobile Access
  D. High throughput maintained while still protecting domain against threats

• Question 23:

  Which is a key feature of Cisco Defense Orchestrator?

  A. Simplifies security policy management
  B. Identifies sensitive data in cloud environments
  C. Detects anomalous traffic on customer's network
  D. Provides retrospective security
  A. Simplifies security policy management

• Question 24:

  Which are two main features of Advanced Malware Protection? (Choose two.)

  A. Rapid App Containment
  B. Leverages Global Threat Intelligence to provide zero-day protection
  C. Threat protection across the entire attack continuum
  D. User and Entity Behavior Analytics
  B. Leverages Global Threat Intelligence to provide zero-day protection
  C. Threat protection across the entire attack continuum

• Question 25:

  Which feature of CTA can separate statistically normal traffic form anomalous traffic?

  A. URL filtering
  B. Trust modeling
  C. Anomaly detection
  D. Event classification
  C. Anomaly detection

• Question 26:

  What is a main benefit of Cisco's Clouldlock Data Loss Prevention feature?

  A. Reduces cost with easy implementation and installation
  B. Provides in depth cloud app analytics and tracking
  C. Allow organizations to retroactively identify malware within their environment
  D. Includes 70+ out of the box policies for enforcement, such as PCI, HIPAA, etc
  D. Includes 70+ out of the box policies for enforcement, such as PCI, HIPAA, etc

• Question 27:

  Which are two main features of DDoS Attack Prevention? (Choose two)

  A. Block or allow traffic automatically
  B. Redirects DDoS traffic back to attacker
  C. Leveraging AMP ThreatGrid technology
  D. Stop attacks within seconds of detection
  A. Block or allow traffic automatically
  D. Stop attacks within seconds of detection

• Question 28:

  Which two Cisco products are part of the mobile threat-centric solution module? (Choose two.)

  A. Advanced sandboxing with Threat Grid
  B. Automated policy enforcement with ASAv
  C. Enhanced control access with ISE and Cloudlock
  D. Software-defined segmentation through TrustSec
  E. Enforced device security policies with Meraki
  C. Enhanced control access with ISE and Cloudlock
  E. Enforced device security policies with Meraki

• Question 29:

  Which feature of E-mail Security protects users from virus outbreaks using the Tabs database to quarantine suspicious messages?

  A. Antivirus defense
  B. Outbreak fitters
  C. Data Loss Prevention
  D. Advanced Malware Protection
  B. Outbreak fitters

• Question 30:

  Which are two main features of Stateful Firewalling? (Choose two.)

  A. Clientless lagging
  B. File retrospection
  C. Full VX LAN support
  D. File reputation
  A. Clientless lagging
  C. Full VX LAN support