Cisco 500-651 Free Practice Questions

NEW QUESTION 1
What are two key points of the Cisco Security and Threat Landscape module? (Choose two.)

• A. The Cisco Security Solutions Portfolio drives customer business outcomes by providing threat-centric defense, visibility and control, and flexible solutions
• B. The threat landscape is expanding, becoming more complex, and threats are increasingly costing more to customers
• C. The Cisco Security Solutions Portfolio stops all threat from entering a customers network.
• D. Customers need several solutions to protect their environment.

Answer: AB

Explanation: ASAS Security NGFW and NGIPS SE Module 4

NEW QUESTION 2
Which are two main features of FirePOWER Threat Defense? (Choose two.)

• A. Unify Images for more intuitive interface management
• B. Provide malware detection score foe additional analytics
• C. Deliver Data Loss Prevention through the virtual lock
• D. Offer intuitive interface including new management options and control

Answer: AD

NEW QUESTION 3
Which feature of ISE is Terminal Access Control System (TACACS) a part of?

• A. Device Administration
• B. Device Profiling
• C. Centralized policy management
• D. Guest access management

Answer: A

Explanation: ASAS Policy and Access SE Module 5

NEW QUESTION 4
Which two Cisco products are a part of the "endpoints" threat-centric solution module? (Choose two.)

• A. Cisco Umbrella
• B. Cisco Defense Orchestrator
• C. Cisco VPN 3000
• D. Cisco Stealthwatch
• E. Cisco AMP for Endpoints

Answer: AE

Explanation: ASAS Security Threat Centric Solutions - AM and SE Module

NEW QUESTION 5
How does the Cisco AnyConnect AMP Module help to protect customer's networks?

• A. AMP is a unified agent that combines posture check and authentication across wired wireless, and VPN networks.
• B. AMP Module can profile devices before allowing them to connect
• C. AMP provides highly secure access for select enterprise mobile applications
• D. AnyConnect can deploy AMP for Endpoints for Windows or OSX

Answer: D

Explanation: ASAS Policy and Access SE Module 5

NEW QUESTION 6
What is key feature of Cognitive Threat Analytics?

• A. It enables safe email usage with event Analytics
• B. It improves threat detection over time with machine learning
• C. It enhances anonymity with URL filtering
• D. It enables greater endpoint device profiling intelligence with entity modeling

Answer: B

Explanation: ASAS Security Advanced Threats SE Module

NEW QUESTION 7
Which is a main element of FirePOWER Device Manager?

• A. On-box, Web-based management
• B. Streamlined user experience
• C. Simplified interface
• D. Cloud-based policy orchestration

Answer: A

Explanation: ASAS Security NGFW and NGIPS SE Module 4

NEW QUESTION 8
Which is a key feature that Advanced Malware Protection provides?

• A. Dynamic Content Analysis
• B. Reputation Analytics
• C. Retrospective Security
• D. Dynamic URL Filtering

Answer: C

Explanation: ASAS Security Advanced Threats SE Module 6

NEW QUESTION 9
Which are two key Cisco benefits of the web threat-centric solution? (Choose two.)

• A. Data Loss Prevention with NGFW
• B. Endpoint device profiling with ISE
• C. E-mail encryption with CRES
• D. Malware blocking with AMP
• E. Rogue web application protection through CTA

Answer: DE

Explanation: ASAS Security Threat Centric Solutions - AM and SE Module 7

NEW QUESTION 10
Which are two main features of Advanced Malware Protection? (Choose two.)

• A. Rapid App Containment
• B. Leverages Global Threat Intelligence to provide zero-day protection
• C. Threat protection across the entire attack continuum
• D. User and Entity Behavior Analytics

Answer: BC

Explanation: ASAS Security Advanced Threats SE Module 6

NEW QUESTION 11
Which two Cisco solution are part of the Mobile threat centric solution? (Choose two.)

• A. Cisco AnyConnect
• B. Cisco Umbrella
• C. Cisco NGFW
• D. Cisco NGIPS
• E. Cisco Defense Orchestrator

Answer: AB

Explanation: ASAS Security Threat Centric Solutions - AM and SE Module 7

NEW QUESTION 12
Which three features provided by NGFW and NGIPS support the Internet Edge' use case? (Choose three.)

• A. Supports High Availability
• B. Support for profiling devices
• C. Supports dynamic routing protocols such as OSPF or BGP
• D. Support for Platform exchange grid
• E. Support for High Bandwith environments
• F. Support for integrated posture assessment

Answer: ACE

NEW QUESTION 13
What two challenges do customers (ace in their Campus and Branch deployments? (Choose two)

• A. Securing the entire infrastructure
• B. Stopping data breaches across campuses and branches
• C. Protect data across multiple cloud applications
• D. Monitoring file behavior across a large set of endpoints
• E. Understanding what our users are doing online

Answer: BC

NEW QUESTION 14
Which is a Cisco recommended driver for network security?

• A. Offer a threat-foe used security solution
• B. Provide automated impact assessment
• C. Focus on point products
• D. Assign central, role-based management

Answer: A

NEW QUESTION 15
Which feature of Cisco Web Security leverages the Outbreak Intelligence Engine to scan individual pieces of websites before allowing access?

• A. Antivirus Monitoring
• B. Dynamic Content Analysis
• C. Real-time Sandboxing Analysis
• D. Visibility control

Answer: C

Explanation: ASAS Security Web and Email SE Module 2

NEW QUESTION 16
Which feature in the DNS security module provide on and off network DNS protection?

• A. Umbrella
• B. Layer-4 monitoring
• C. Real-time sandboxing
• D. Data Loss Prevention

Answer: A