201 Q&As in UPDATED 300-740 Exam Questions Certification Test Engine to PDF [Q37-Q60]

Rate this post

201 Q&As in UPDATED 300-740 Exam Questions Certification Test Engine to PDF

Get The Important Preparation Guide With 300-740 Dumps

Q37. Cisco Umbrella provides visibility and assurance by:

Reducing the scope of security monitoring to non-web traffic

Focusing exclusively on email security

Limiting its functionality to on-premises solutions

Offering DNS-layer security to prevent access to malicious domains

Q38. Restoring affected systems after a security incident is known as _________.

complicating

reinstituting

abandoning

quarantining

Q39. The main advantage of implementing user and device authentication via identity certificates is:

The reduction in the need for physical security controls

The elimination of passwords for all users

The increase in the speed of network connections

The provision of a secure method to verify identities

Q40. The SAFE Key structure is designed to:

Unlock encrypted data

Guide the deployment of network devices

Organize security measures within the network architecture

Create a single sign-on experience for users

Q41.

Refer to the exhibit. An engineer must troubleshoot an issue with excessive SSH traffic leaving the internal network between the hours of 18:00 and 08:00. The engineer applies a policy to the Cisco ASA firewall to block outbound SSH during the indicated hours; however, the issue persists. What should be done to meet the requirement?

Change the time of rule 2.

Delete rule 4

Delete rule 3

Change the time of rule 5

Q42.

Refer to the exhibit. An engineer must create a firewall policy to allow web server communication only. The indicated firewall policy was applied; however, a recent audit requires that all firewall policies be optimized.
Which set of rules must be deleted?

Rules 3 and 4

Rules 2 to 4

Rules 2 to 5

Rules 1 and 5

Q43. What does SAML/SSO stand for and what is its purpose?

Single Access Markup Language / Single Sign-On, to simplify logins across different systems

Security Assertion Markup Language / Single Sign-On, to simplify logins across different systems

Secure Access Markup Language / Secure Sign-On, to increase login complexity

Security Assertion Markup Language / Secure Sign-Out, to secure logouts across systems

Q44. Multifactor authentication typically requires something you know, something you have, and something you _________.

forget

encrypt

are

delete

Q45. What is the primary purpose of implementing identity certificates for user and device authentication?

To increase network speed

To monitor user activity

To ensure secure access to resources

To track device locations

Q46. Security audit reports are crucial for:

Eliminating the need for security policies

Promoting a false sense of security

Reducing the overall security budget

Identifying compliance gaps and areas lacking sufficient security controls

Q47.

Refer to the exhibit. An engineer must block internal users from accessing Facebook and Facebook Apps. All other access must be allowed. The indicated policy was created in Cisco Secure Firewall Management Center and deployed to the internet edge firewall; however, users still can access Facebook. Which two actions must be taken to meet the requirement? (Choose two.)

Set Destination Zones to outside for rule 2.

Set Source Zones to inside for rule 2.

Set Applications to Facebook and Facebook Apps for rule 2.

Set Destination Zones to outside for rule 1.

Set Source Zones to inside for rule 1.

Q48.

Refer to the exhibit. An engineer must configure multifactor authentication using the Duo Mobile app to provide admin access to a Cisco Meraki switch. The engineer already configured Duo Mobile and received an activation code. Drag and drop the steps from left to right to complete the configuration.

Q49. Telemetry reports are essential for:

Identifying suspicious activities and potential threats within a network

Decreasing network performance

Manual analysis of all network data

Ignoring minor security incidents

Q50. Advanced app control policies are implemented to:

Limit the bandwidth usage of applications

Allow all applications equally without any restrictions

Distinguish between and control individual application actions

Increase the speed of cloud applications

Q51. Which of the following is a use case for visibility and assurance automation?

Reducing the accuracy of threat detection

Decreasing the speed of security operations

Increasing manual intervention in security processes

Automating the response to security incidents

Q52. To validate traffic flow and telemetry reports for baseline and compliance behavior analysis, one should use:

Basic firewall rules without logging

Cisco Secure Network Analytics for in-depth network visibility

Manual log reviews exclusively

Paper-based tracking systems

Q53. A converged multicloud policy allows organizations to:

Achieve consistent security and compliance across multiple cloud environments

Implement different security policies for each cloud provider

Avoid using public cloud services

Focus solely on on-premises security

Q54. Cisco Secure Cloud Analytics helps in:

Identifying potential security threats across cloud environments

Solely managing on-premises network traffic

Decreasing visibility into cloud infrastructure

Complicating compliance reporting

Q55. Endpoint posture policies are implemented to ensure that:

Devices meet certain security criteria before accessing resources

All users have administrative access

Devices are charged before use

Users can access any resource without restrictions

Q56. Security services edge (SSE) combines which of the following services for enhanced security at the network edge?

Secure Web Gateway (SWG)

Cloud Access Security Broker (CASB)

Zero Trust Network Access (ZTNA)

Uninterruptible Power Supply (UPS)

Q57.

Refer to the exhibit. An engineer must configure a remote access IPsec/IKEv2 VPN that will use SHA-512 on a Cisco ASA firewall. The indicated configuration was applied to the firewall; however, the tunnel fails to establish. Which command must be run to meet the requirement?

integrity sha512

protocol esp encryption sha512

ipsec-proposal sha512

encryption sha512

Q58.

Refer to the exhibit. An engineer must troubleshoot an incident by using Cisco Secure Cloud Analytics. What is the cause of the issue?

SYN flood attack toward the DNS server that has IP address 10.10.10.10

DoS attack toward the 50.10.10.0/24 network from an internal IP address

Ping of Death attack toward the host that has IP address 10.10.10.10

TCP fingerprinting toward the 50.10.10.0/24 network

Q59. Multifactor authentication enhances security by requiring:

Multiple verification methods before granting access

A username only for identification

Only a simple password

A single security question

Q60. The role of a reverse proxy in cloud security includes:

Increasing the visibility of backend servers to external threats

Load balancing, SSL encryption, and protection from attacks

Simplifying the architecture by removing the need for WAF

Directly exposing application APIs to the public internet

Prepare With Top Rated High-quality 300-740 Dumps For Success in Exam: https://www.prepawaypdf.com/Cisco/300-740-practice-exam-dumps.html

Related posts:

admin

You might also like

Leave a Reply Cancel reply