A Cisco ESA network administrator has been tasked to use a newly installed service to help create policy based on the reputation verdict. During testing, it is discovered that the Cisco ESA is not dropping files that have an undetermined verdict. What is causing this issue?

• A.The policy was created to send a message to quarantine instead of drop
• B.The file has a reputation score that is above the threshold
• C.The file has a reputation score that is below the threshold
• D.The policy was created to disable file analysis

Comment: *

Name: *

Email: *

Verification: *

Due to a traffic storm on the network, two interfaces were error-disabled, and both interfaces sent SNMP traps. Which two actions must be taken to ensure that interfaces are put back into service? (Choose two)

• A.Enter the shutdown and no shutdown commands on the interfaces.
• B.Ensure that interfaces are configured with the error-disable detection and recovery feature You can also bring up the port by using these commands:
  + The "shutdown" interface configuration command followed by the "no shutdown" interface configuration command restarts the disabled port.
  + The "errdisable recovery cause ..." global configuration command enables the timer to automatically recover error-disabled state, and the "errdisable recovery interval interval" global configuration command specifies the time to recover error-disabled state.
• C.Have Cisco Prime Infrastructure issue an SNMP set command to re-enable the ports after the preconfigured interval.
• D.Use EEM to have the ports return to service automatically in less than 300 seconds.
• E.Enable the snmp-server enable traps command and wait 300 seconds

Comment: *

Name: *

Email: *

Verification: *

How does DNS Tunneling exfiltrate data?

• A.An attacker uses a non-standard DNS port to gain access to the organization's DNS servers in order to poison the resolutions.
• B.An attacker registers a domain that a client connects to based on DNS records and sends malware through that connection.
• C.An attacker sends an email to the target with hidden DNS resolvers in it to redirect them to a malicious domain.
• D.An attacker opens a reverse DNS shell to get into the client's system and install malware on it.

Comment: *

Name: *

Email: *

Verification: *

What are two workload security models? (Choose two.)

• A.off-premises
• B.on-premises
• C.PaaS
• D.IaaS
• E.SaaS

Comment: *

Name: *

Email: *

Verification: *

Drag and drop the cloud security assessment components from the left onto the definitions on the right.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *