Cisco 500-651 Study Guides 2019

500-651 Exam Questions and Answers for Cisco certification, Real Success Guaranteed with Updated 500-651 Dumps. 100% PASS 500-651 Security Architecture for Systems Engineer exam Today!

Online 500-651 free questions and answers of New Version:

NEW QUESTION 1
Which three options does Cisco provides customers in terms of “Visibility and Control” against today's threats? (Choose three)

  • A. Granular device visibility and management
  • B. Unparalleled network and endpoint visibility
  • C. 18-month device release cycle
  • D. Bandwith Utilization Monitoring
  • E. Comprehensive policy enforcement
  • F. Fast device policy updates

Answer: ABF

NEW QUESTION 2
Which are two main challenges of securing web and e-mail? (Choose two.)

  • A. Cyber Crime is a growing industry
  • B. Securing cloud apps
  • C. Protecting against data centers
  • D. 90% of cyber criminals use DNS in attacks

Answer: AD

NEW QUESTION 3
Which feature of ISE combines user identification with robust context sharing platform to prevent
inappropriate access?

  • A. Centralized policy management
  • B. Context-aware access
  • C. Patch management
  • D. Platform exchange grid

Answer: B

Explanation: ASAS Policy and Access SE Module 5

NEW QUESTION 4
Which are two key Cisco products that are part of the web threat-centric solution? (Choose two.)

  • A. Cisco Defense Orchestrator
  • B. Cisco Umbrella
  • C. Cisco Identity Services Engine
  • D. Cisco Web Security Appliance
  • E. Cisco Email Security Appliance

Answer: BD

Explanation: ASAS Security Threat Centric Solutions - AM and SE Module 7

NEW QUESTION 5
Which two products are part of Cisco's Data Center threat-centric solution? (Choose two.)

  • A. Rapid threat detection through NGFW and NGFWv
  • B. Enforced device security with Meraki
  • C. URL filtering
  • D. Relationship segmentation
  • E. Automated policy enforcement with ASAv

Answer: AE

Explanation: ASAS Security Threat Centric Solutions - AM and SE Module 7

NEW QUESTION 6
What is a main benefit of Cisco's Clouldlock Data Loss Prevention feature?

  • A. Reduces cost with easy implementation and installation
  • B. Provides in depth cloud app analytics and tracking
  • C. Allow organizations to retroactively identify malware within their environment
  • D. Includes 70+ out of the box policies for enforcement, such as PCI, HIPAA, etc

Answer: D

Explanation: ASAS Cisco Cloud Security SE - Module 3

NEW QUESTION 7
Which are two main features of Advanced Malware Protection? (Choose two.)

  • A. Rapid App Containment
  • B. Leverages Global Threat Intelligence to provide zero-day protection
  • C. Threat protection across the entire attack continuum
  • D. User and Entity Behavior Analytics

Answer: BC

Explanation: ASAS Security Advanced Threats SE Module 6

NEW QUESTION 8
Which feature in the DNS security module provide on and off network DNS protection?

  • A. Umbrella
  • B. Layer-4 monitoring
  • C. Real-time sandboxing
  • D. Data Loss Prevention

Answer: A

NEW QUESTION 9
Which two Cisco products are part of the mobile threat-centric solution module? (Choose two.)

  • A. Advanced sandboxing with Threat Grid
  • B. Automated policy enforcement with ASAv
  • C. Enhanced control access with ISE and Cloudlock
  • D. Software-defined segmentation through TrustSec
  • E. Enforced device security policies with Meraki

Answer: CE

NEW QUESTION 10
What are two main features of enabling Cloudlock in a customer’s environment? (Choose two)

  • A. Cloudlock connects via Oauth
  • B. Cloud App security works on plug-in
  • C. Easily creates network lags for different users
  • D. It takes less than five minutes to enable per platform
  • E. Protects against cloud-native malware

Answer: AE

Explanation: Cisco Cloud Security SE - Module 3

NEW QUESTION 11
Which feature of Cisco AnyConnect allows pie-login authentication using windows machines, or single sign-on user authentication using Windows logon credentials?

  • A. Secure Layer-2 Network Access
  • B. Flexible AAA Options
  • C. Differentiated Mobile Access
  • D. Trusted Network Detection

Answer: A

NEW QUESTION 12
Which are three key features or benefits of DNS-layer security? (Choose three.)

  • A. Real-time sandboxing
  • B. Identify the internet infrastructure used for attacks
  • C. Uncover current & emergent threats
  • D. Protect any device on or off the network
  • E. Data Loss Prevention
  • F. Retrospective Analysis

Answer: BCD

NEW QUESTION 13
Which feature of AMP tracks the movement of a file within the environment and monitors its disposition over time?

  • A. Trajectory
  • B. Fuzzy Fingerprinting
  • C. Machine Learning
  • D. ThreatGrid

Answer: A

Explanation: ASAS Security Advanced Threats SE Module 6

NEW QUESTION 14
Which two Cisco products are a part of the "endpoints" threat-centric solution module? (Choose two.)

  • A. Cisco Umbrella
  • B. Cisco Defense Orchestrator
  • C. Cisco VPN 3000
  • D. Cisco Stealthwatch
  • E. Cisco AMP for Endpoints

Answer: AE

Explanation: ASAS Security Threat Centric Solutions - AM and SE Module

NEW QUESTION 15
Which three NGFW and NGIPS features support the 'Complex Remote Access' use case? (Choose three.)

  • A. Support for device onboarding
  • B. Users protected regardless of physical location
  • C. Fuzzy Fingerprinting
  • D. Detection of anomalous traffic
  • E. Controls and protections extended beyond VPN controls
  • F. Secure access extended to all users

Answer: BEF

Explanation: ASAS Security NGFW and NGIPS SE Module 4

NEW QUESTION 16
Which are two main features of Intrusion Prevention? (Choose two.)

  • A. Threat analysis through network behavior analysis
  • B. Protecting against Zero-Day attacks
  • C. Layer-4 traffic monitoring across platforms
  • D. Vulnerability-based threat management

Answer: AD

NEW QUESTION 17
Which two features are part of the ISE Plus license? (Choose two.)

  • A. Threat Centric NAC
  • B. Profiling and feed services
  • C. Guest management
  • D. Cisco pxGrid
  • E. Basic network Access AA
  • F. 802 IX

Answer: BD

Explanation: ASAS Policy and Access SE Module 5

Recommend!! Get the Full 500-651 dumps in VCE and PDF From Certleader, Welcome to Download: https://www.certleader.com/500-651-dumps.html (New 88 Q&As Version)