Approved 500-651 Exam Dumps 2021

NEW QUESTION 1
Which feature of AnyConnect provides you the ability to identify data breaches as they happen?

• A. Flexible AAA Options
• B. Network Visibility Module
• C. Differentiated Mobile Access
• D. Trusted Network Detection

Answer: B

Explanation: ASAS Policy and Access SE Module 5

NEW QUESTION 2
Which is a component of Cisco's Web and E-mail Security Solution?

• A. Device Profiling
• B. Next Generation Intrusion Prevention System
• C. Next Generation Firewall
• D. DNS-Layer security

Answer: D

Explanation: ASAS Security Web and Email SE Module 2

NEW QUESTION 3
Which StealthWatch device monitors, analyzes, separates, categorizes, and stores information from each flow, allowing it to create a baseline of typical expected network activity?

• A. Flow collector
• B. Advanced malware protection
• C. Forensic investigation
• D. Malware clustering

Answer: A

NEW QUESTION 4
Which two Cisco solution are part of the Mobile threat centric solution? (Choose two.)

• A. Cisco AnyConnect
• B. Cisco Umbrella
• C. Cisco NGFW
• D. Cisco NGIPS
• E. Cisco Defense Orchestrator

Answer: AB

Explanation: ASAS Security Threat Centric Solutions - AM and SE Module 7

NEW QUESTION 5
How does AMP’s file reputation feature help customers?

• A. It automatically detects polymorphic variants of known malware
• B. It increases time to detection with exact data analytics
• C. It increases the protection to systems with exact fingerprinting
• D. It enables secure web browsing with cognitive threat analytics

Answer: A

NEW QUESTION 6
Which feature of Cisco AnyConnect allows pie-login authentication using windows machines, or single sign-on user authentication using Windows logon credentials?

• A. Secure Layer-2 Network Access
• B. Flexible AAA Options
• C. Differentiated Mobile Access
• D. Trusted Network Detection

Answer: A

NEW QUESTION 7
Which three malware categories does real-time Malware Scanning protect you from? (Choose three)

• A. Antivirus Monitoring
• B. Adware
• C. Trojan Downloader
• D. Outbreak Filters
• E. Web Reputation
• F. Phishing URL

Answer: BCF

Explanation: ASAS Security Advanced Threats SE Module 6

NEW QUESTION 8
Which two products are part of Cisco's Data Center threat-centric solution? (Choose two.)

• A. Rapid threat detection through NGFW and NGFWv
• B. Enforced device security with Meraki
• C. URL filtering
• D. Relationship segmentation
• E. Automated policy enforcement with ASAv

Answer: AE

Explanation: ASAS Security Threat Centric Solutions - AM and SE Module 7

NEW QUESTION 9
Which three NGFW and NGIPS features support the 'Complex Remote Access' use case? (Choose three.)

• A. Support for device onboarding
• B. Users protected regardless of physical location
• C. Fuzzy Fingerprinting
• D. Detection of anomalous traffic
• E. Controls and protections extended beyond VPN controls
• F. Secure access extended to all users

Answer: BEF

Explanation: ASAS Security NGFW and NGIPS SE Module 4

NEW QUESTION 10
Which is a feature mentioned in the DNS security module?

• A. Layer-4 monitoring
• B. Umbrella
• C. Real-time sandboxing
• D. Data Loss Prevention

Answer: B

Explanation: ASAS Security Web and Email SE Module 2

NEW QUESTION 11
Which is a key feature of Cisco Defense Orchestrator?

• A. Simplifies security policy management
• B. Identifies sensitive data in cloud environments
• C. Detects anomalous traffic on customer's network
• D. Provides retrospective security

Answer: A

Explanation: ASAS Cisco Cloud Security SE - Module 3

NEW QUESTION 12
Which feature of CTA can separate statistically normal traffic form anomalous traffic?

• A. URL filtering
• B. Trust modeling
• C. Anomaly detection
• D. Event classification

Answer: C

Explanation: ASAS Security Advanced Threats SE Module 6

NEW QUESTION 13
How does the Cisco AnyConnect AMP Module help to protect customer's networks?

• A. AMP is a unified agent that combines posture check and authentication across wired wireless, and VPN networks.
• B. AMP Module can profile devices before allowing them to connect
• C. AMP provides highly secure access for select enterprise mobile applications
• D. AnyConnect can deploy AMP for Endpoints for Windows or OSX

Answer: D

Explanation: ASAS Policy and Access SE Module 5

NEW QUESTION 14
What is a main benefit of Cisco's Clouldlock Data Loss Prevention feature?

• A. Reduces cost with easy implementation and installation
• B. Provides in depth cloud app analytics and tracking
• C. Allow organizations to retroactively identify malware within their environment
• D. Includes 70+ out of the box policies for enforcement, such as PCI, HIPAA, etc

Answer: D

Explanation: ASAS Cisco Cloud Security SE - Module 3

NEW QUESTION 15
Which Cisco solution features recursive DNS capabilities?

• A. Cisco Defense Orchstrator
• B. Identity Services Engine
• C. Umbrella
• D. Cognitive Threat Analytics

Answer: C

Explanation: ASAS Security Web and Email SE Module 2

NEW QUESTION 16
Which feature of ISE is Terminal Access Control System (TACACS) a part of?

• A. Device Administration
• B. Device Profiling
• C. Centralized policy management
• D. Guest access management

Answer: A

Explanation: ASAS Policy and Access SE Module 5

NEW QUESTION 17
Which feature of Cisco AnyConnect allows pre-login authentication using windows machines, or single sign-on user authentication using Windows logon credentials?

• A. Secure Layer-2 Network Access
• B. Flexible AAA Options
• C. Differentiated Mobile Access
• D. Trusted Network Detection

Answer: A

Explanation: ASAS Policy and Access SE Module 5

NEW QUESTION 18
What is key feature of Cognitive Threat Analytics?

• A. It enables safe email usage with event Analytics
• B. It improves threat detection over time with machine learning
• C. It enhances anonymity with URL filtering
• D. It enables greater endpoint device profiling intelligence with entity modeling

Answer: B

Explanation: ASAS Security Advanced Threats SE Module