Cisco 500-651 Exam Questions 2021

NEW QUESTION 1
Which is a Cisco solution features retrospective security?

• A. AMP for Endpoint
• B. Cisco Defense Orchestrator
• C. Umbrella
• D. Investigate

Answer: A

Explanation: ASAS Cisco Cloud Security SE - Module 3

NEW QUESTION 2
Which two options are attack vectors protected by Identity and Access Control? (Choose two.)

• A. Backups
• B. Mobile
• C. Endpoints
• D. Cloud apps
• E. Voicemail

Answer: BC

NEW QUESTION 3
Which feature discovers and controls malicious cloud apps connected to the corporate environ merit?

• A. Umbrella
• B. Cognitive Threat Analytics
• C. Cloudlock
• D. Investigate

Answer: C

Explanation: Cisco Cloudlock Apps Firewall discovers and controls malicious cloud apps connected to your corporate environment, and provides the world’s largest crowd-sourced security solution to identify individual app risk, using our Community Trust Rating.

NEW QUESTION 4
Which feature of AnyConnect provides you the ability to identify data breaches as they happen?

• A. Flexible AAA Options
• B. Network Visibility Module
• C. Differentiated Mobile Access
• D. Trusted Network Detection

Answer: B

Explanation: ASAS Policy and Access SE Module 5

NEW QUESTION 5
Which are three key features of DNS-layer security? (Choose three.)

• A. Data Loss Prevention
• B. Retrospective Analysis
• C. Real-time sandboxing
• D. Provides visibility into all Internet activity
• E. Acts as first level of protection by providing security at DNS layer
• F. Resolves all DNS request through a single recursive DNS service

Answer: DEF

NEW QUESTION 6
Which are three main features of the Meraki MX discussed in Cloud App Security module? (Choose three)

• A. Cloud-Brokered VPN
• B. Posture Assessment
• C. Intrusion Prevention
• D. Email Security
• E. Profiling
• F. Next Generation Firewall

Answer: CEF

NEW QUESTION 7
Which three options does Cisco provides customers in terms of “Visibility and Control” against today's threats? (Choose three)

• A. Granular device visibility and management
• B. Unparalleled network and endpoint visibility
• C. 18-month device release cycle
• D. Bandwith Utilization Monitoring
• E. Comprehensive policy enforcement
• F. Fast device policy updates

Answer: ABF

NEW QUESTION 8
How does the Cisco AnyConnect AMP Module help to protect customer's networks?

• A. AMP is a unified agent that combines posture check and authentication across wired wireless, and VPN networks.
• B. AMP Module can profile devices before allowing them to connect
• C. AMP provides highly secure access for select enterprise mobile applications
• D. AnyConnect can deploy AMP for Endpoints for Windows or OSX

Answer: D

Explanation: ASAS Policy and Access SE Module 5

NEW QUESTION 9
Which are two features of Cisco FirePOWER NGFW? (Choose two.)

• A. Next generation IPS to detect intrusions and prevent threats
• B. URL filtering to restrict access to specific sites and sub-sites
• C. Data Loss Prevention
• D. Increased IT management needs

Answer: AB

NEW QUESTION 10
Which TrustSec feature allows customers to simplify firewall administration, avoiding the common rule explosions that happen when new servers are onboarded?

• A. Firewall administration
• B. Push policies
• C. Traffic tagging
• D. Regulate access

Answer: C

Explanation: ASAS policy and Access SE Module 5

NEW QUESTION 11
Which two Cisco products are part of the mobile threat-centric solution module? (Choose two.)

• A. Advanced sandboxing with Threat Grid
• B. Automated policy enforcement with ASAv
• C. Enhanced control access with ISE and Cloudlock
• D. Software-defined segmentation through TrustSec
• E. Enforced device security policies with Meraki

Answer: CE

NEW QUESTION 12
Which feature of ISE combines user identification with robust context sharing platform to prevent
inappropriate access?

• A. Centralized policy management
• B. Context-aware access
• C. Patch management
• D. Platform exchange grid

Answer: B

Explanation: ASAS Policy and Access SE Module 5

NEW QUESTION 13
Which Cisco product included in the Endpoint threat-centric solution?

• A. Umbrella
• B. ASAv
• C. Meraki MX D Cloudlock

Answer: A

Explanation: ASAS Security Threat Centric Solutions - AM and SE Module 7

NEW QUESTION 14
Which feature of CTA can separate statistically normal traffic form anomalous traffic?

• A. URL filtering
• B. Trust modeling
• C. Anomaly detection
• D. Event classification

Answer: C

Explanation: ASAS Security Advanced Threats SE Module 6

NEW QUESTION 15
Which three values are provided by NGFW and NGIPS in the “Campus NGFW”? (Choose three.)

• A. Dynamic routing port to meet all network needs.
• B. Differentiated Mobile Access
• C. Additional firewalls across all platforms
• D. High throughput maintained while still protecting domain against threats
• E. Identity Services Engine
• F. Flexible AAA Options

Answer: ABD

NEW QUESTION 16
Which feature in the DNS security module provide on and off network DNS protection?

• A. Umbrella
• B. Layer-4 monitoring
• C. Real-time sandboxing
• D. Data Loss Prevention

Answer: A

NEW QUESTION 17
Which are three main elements of the Cloud App Security? (Choose three.)

• A. Cloud Data Loss Prevention
• B. Rapid Breach Remediation
• C. User and Entity Behavior Analytics
• D. Apps Firewall
• E. DNS-Layer Protection

Answer: ADE