Security

Question 1

a security architectural frameworks that helps design secure solutions

Answer 1

Cisco SAFE

Question 2

Cisco threat intelligence organization

Answer 2

Talos

Question 3

Acquire by Cisco in 2014, a solution that can perform static file analysis (MD5, filenames,), dynamic file analysis, sandbox

Answer 3

Cisco Threat Grid

Question 4

Is a malware analysis and protection solution that goes beyond point-in time detection.

Answer 4

Cisco Advance Malware Protection (AMP)

Question 5

Amp components

Answer 5

AMP Cloud
AMP connectors
AMP for Endpoints
AMP for Network
AMP for Email
AMP for WEB
AMP for Meraki

Question 6

provide first line of defense against threat on the Internet by blocking request to malicious domain by DNS

Answer 6

Cisco Umbrella (OpenDNS)

Question 7

all-in-one web gateway that includes a wide variety of protections that can block hidden malware from both suspicious and legitimate websites

Answer 7

Cisco Web Security Appliance (WSA)

Question 8

A system that passively monitors and analyzes network traffic for potential network intrusion attacks

Answer 8

Next-Generation Intrusion Prevention System (NGIPS)

Question 9

is a collector and aggregator of network telemetry data that performs network security analysis and monitoring to automatically detect threats that manage to infiltrate a network

Answer 9

Cisco Stealtwatch

Question 10

Two offering of Stealthwatch

Answer 10

1. Stealthwatch enterprise
2. Stealthwatch Cloud

Question 11

Is a security policy management platform that provides highly secure network access control (NAC)

Answer 11

Cisco Identity Service Engine (ISE)

Question 12

Standard for portbased network access control that provide authentication mechanism for local area network

Answer 12

802.1X (dot1x)

Question 13

802.1X components

Answer 13

1. Extensible Authentication Protocol (EAP)
2. EAP Method (EAP Type)
3. EAP over LAN (EAPoL)
4. Radius Protocol

Question 14

802.1X roles

Answer 14

1. Supplicant
2. Authenticator
3. Authentication Server

Question 15

an access control technique that enables port-base access control using mac-address of endpoint and typically used as a fallback mechanism of 802.1x

Answer 15

MAC Authentication Bypass (MAB)

Question 16

a next-generation access control developed by Cisco to address growing operational challenge related to maintaining firewall rules and ACLs by using Security Group Tag (SGT)

Answer 16

Cisco TrustSec

Question 17

TrustSec Configuration

Answer 17

1. Ingress Classification
2. Propagation
3. Egress enforcement

Question 18

IEEE 802.1AE standard base layer 2 hop-by-hop encryption method. traffic is only encrypted only on the wire between to MACsec peer and is unencrypted as it process through the switch

Answer 18

MACSec

Question 19

Two MACSec mechanism

Answer 19

1. Security Association Protocol (SAP) - cisco proprietary
2. MACsec Key Agreement (MKA)

Question 20

encrypted link between and endpoint and a switch

Answer 20

Downlink MACSec

Question 21

encrypting a link between switches with 802.1AE

Answer 21

Uplink MACSec