What is a characteristic of a bridge group in ASA Firewall transparent mode'?

• A.It allows ARP traffic with a single access rule.
• B.It is a Layer 3 segment and includes one port and customizable access rules.
• C.It includes multiple interfaces and access rules between interfaces are customizable
• D.It has an IP address on its BVI interface and is used for management traffic.

Correct Answer: C

Reference:

Comment: *

Name: *

Email: *

Verification: *

After deploying a Cisco ESA on your network, you notice that some messages fail to reach their destinations.
Which task can you perform to determine where each message was lost?

• A.Configure the trackingconfig command to enable message tracking.
• B.Generate a system report.
• C.Review the log files.
• D.Perform a trace.

Comment: *

Name: *

Email: *

Verification: *

An engineer used a posture check on a Microsoft Windows endpoint and discovered that the MS17-010 patch was not installed, which left the endpoint vulnerable to WannaCry ransomware. Which two solutions mitigate the risk of this ransom ware infection? (Choose two)

• A.Configure a posture policy in Cisco Identity Services Engine to install the MS17-010 patch before allowing access on the network.
• B.Set up a profiling policy in Cisco Identity Service Engine to check and endpoint patch level before allowing access on the network.
• C.Configure a posture policy in Cisco Identity Services Engine to check that an endpoint patch level is met before allowing access on the network.
• D.Configure endpoint firewall policies to stop the exploit traffic from being allowed to run and replicate throughout the network.
• E.Set up a well-defined endpoint patching strategy to ensure that endpoints have critical vulnerabilities patched in a timely fashion.

Correct Answer: A,C

Explanation
A posture policy is a collection of posture requirements, which are associated with one or more identity groups, and operating systems. We can configure ISE to check for the Windows patch at Work Centers > Posture > Posture Elements > Conditions > File.
In this example, we are going to use the predefined file check to ensure that our Windows 10 clients have the critical security patch installed to prevent the Wanna Cry malware.

Comment: *

Name: *

Email: *

Verification: *

A network administrator configures Dynamic ARP Inspection on a switch. After Dynamic ARP Inspection is applied, all users on that switch are unable to communicate with any destination. The network administrator checks the interface status of all interfaces, and there is no err-disabled interface. What is causing this problem?

• A.DHCP snooping has not been enabled on all VLANs.
• B.The ip arp inspection limit command is applied on all interfaces and is blocking the traffic of all users.
• C.Dynamic ARP Inspection has not been enabled on all VLANs
• D.The no ip arp inspection trust command is applied on all user host interfaces

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

A network administrator configures command authorization for the admm5 user. What is the admin5 user able to do on HQ_Router after this configuration?

• A.set the IP address of an interface
• B.complete no configurations
• C.add subinterfaces
• D.complete all configurations

Comment: *

Name: *

Email: *

Verification: *