Cisco 500-651 Online Practice Questions and Exam Preparation

Cisco 500-651 Online Questions & Answers

• Question 61:

  Which are three main elements of the Cloud App Security? (Choose three.)

  A. Cloud Data Loss Prevention
  B. Rapid Breach Remediation
  C. User and Entity Behavior Analytics
  D. Apps Firewall
  E. DNS-Layer Protection
  A. Cloud Data Loss Prevention
  D. Apps Firewall
  E. DNS-Layer Protection

• Question 62:

  Which is a security product that was covered in the Policy and access security module?

  A. Cisco NFGW
  B. Cisco Identity Services Engine
  C. Cisco NGIPS
  D. Cisco Defense Orchestrator
  B. Cisco Identity Services Engine

• Question 63:

  Which three malware categories does real-time Malware Scanning protect you from? (Choose three)

  A. Antivirus Monitoring
  B. Adware
  C. Trojan Downloader
  D. Outbreak Filters
  E. Web Reputation
  F. Phishing URL
  B. Adware
  C. Trojan Downloader
  F. Phishing URL

• Question 64:

  Which are two key Cisco products that are part of the web threat-centric solution? (Choose two.)

  A. Cisco Defense Orchestrator
  B. Cisco Umbrella
  C. Cisco Identity Services Engine
  D. Cisco Web Security Appliance
  E. Cisco Email Security Appliance
  B. Cisco Umbrella
  D. Cisco Web Security Appliance

• Question 65:

  Which are three key features of DNS-layer security? (Choose three.)

  A. Data Loss Prevention
  B. Retrospective Analysis
  C. Real-time sandboxing
  D. Provides visibility into all Internet activity
  E. Acts as first level of protection by providing security at DNS layer
  F. Resolves all DNS request through a single recursive DNS service
  D. Provides visibility into all Internet activity
  E. Acts as first level of protection by providing security at DNS layer
  F. Resolves all DNS request through a single recursive DNS service

• Question 66:

  Which Stealthwatch component is a physical or virtual appliance that aggregates and normalizes NetFlow data?

  A. Investigate
  B. Stealthwatch Management Center
  C. Flow Collector
  D. UDP Director
  C. Flow Collector

• Question 67:

  Which is a key feature of Cisco Defense Orchestra?

  A. Profiles devices connected to customer s network
  B. Orchestrates security policy management form one place
  C. Consolidates configuration management
  D. Protects customers network against zero-day attacks
  B. Orchestrates security policy management form one place

• Question 68:

  Which feature of ISE is Terminal Access Control System (TACACS) a part of?

  A. Device Administration
  B. Device Profiling
  C. Centralized policy management
  D. Guest access management
  A. Device Administration

• Question 69:

  Which two options are attack vectors protected by Identity and Access Control? (Choose two.)

  A. Backups
  B. Mobile
  C. Endpoints
  D. Cloud apps
  E. Voicemail
  B. Mobile
  C. Endpoints

• Question 70:

  Which three NGFW and NGIPS features support the 'Complex Remote Access' use case? (Choose three.)

  A. Support for device onboarding
  B. Users protected regardless of physical location
  C. Fuzzy Fingerprinting
  D. Detection of anomalous traffic
  E. Controls and protections extended beyond VPN controls
  F. Secure access extended to all users
  B. Users protected regardless of physical location
  E. Controls and protections extended beyond VPN controls
  F. Secure access extended to all users