Based on the show security policy rule would match all FTP traffic from the inside zone to the outside zone?

• A.intercone-default
• B.internal-inside-dmz
• C.engress outside
• D.inside-portal

Comment: *

Name: *

Email: *

Verification: *

What is considered best practice with regards to committing configuration changes?

• A.Wait until all running and pending jobs are finished before committing
• B.Disable the automatic commit feature that prioritizes content database installations before committing
• C.Export configuration after each single configuration change performed
• D.Validate configuration changes prior to committing

Comment: *

Name: *

Email: *

Verification: *

Match the Cyber-Attack Lifecycle stage to its correct description.

Correct Answer:

Explanation
Reconnaissance - stage where the attacker scans for network vulnerabilities and services that can be exploited.
Installation - stage where the attacker will explore methods such as a root kit to establish persistence Command and Control - stage where the attacker has access to a specific server so they can communicate and pass data to and from infected devices within a network.
Act on the Objective - stage where an attacker has motivation for attacking a network to deface web property

Comment: *

Name: *

Email: *

Verification: *

The CFO found a USB drive in the parking lot and decide to plug it into their corporate laptop. The USB drive had malware on it that loaded onto their computer and then contacted a known command and control (CnC) server, which ordered the infected machine to begin Exfiltrating data from the laptop.
Which security profile feature could have been used to prevent the communication with the CnC server?

• A.Create an anti-spyware profile and enable DNS Sinkhole
• B.Create an antivirus profile and enable DNS Sinkhole
• C.Create a URL filtering profile and block the DNS Sinkhole category
• D.Create a security policy and enable DNS Sinkhole

Comment: *

Name: *

Email: *

Verification: *

Given the image, which two options are true about the Security policy rules. (Choose two.)

• A.The Allow Office Programs rule is using an Application Filter
• B.In the Allow Social Networking rule, allows all of Facebook's functions In the Allow FTP to web server rule, FTP is allowed using port based rule and not APP-ID.
• C.The Allow Office Programs rule is using an Application Group
• D.In the Allow FTP to web server rule, FTP is allowed using App-ID

Comment: *

Name: *

Email: *

Verification: *