Cisco 500-651 Dumps Questions 2021

NEW QUESTION 1
Which Cisco product included in the Endpoint threat-centric solution?

• A. Umbrella
• B. ASAv
• C. Meraki MX D Cloudlock

Answer: A

Explanation: ASAS Security Threat Centric Solutions - AM and SE Module 7

NEW QUESTION 2
Which is a key feature that Advanced Malware Protection provides?

• A. Dynamic Content Analysis
• B. Reputation Analytics
• C. Retrospective Security
• D. Dynamic URL Filtering

Answer: C

Explanation: ASAS Security Advanced Threats SE Module 6

NEW QUESTION 3
Which feature of ISE combines user identification with robust context sharing platform to prevent
inappropriate access?

• A. Centralized policy management
• B. Context-aware access
• C. Patch management
• D. Platform exchange grid

Answer: B

Explanation: ASAS Policy and Access SE Module 5

NEW QUESTION 4
What feature of Anti-Spam Defense determines the reputation of an e-mail?

• A. IP addresses
• B. Threat analysis
• C. Context analysis
• D. Encryption score

Answer: C

NEW QUESTION 5
Which are three key features of DNS-layer security? (Choose three.)

• A. Data Loss Prevention
• B. Retrospective Analysis
• C. Real-time sandboxing
• D. Provides visibility into all Internet activity
• E. Acts as first level of protection by providing security at DNS layer
• F. Resolves all DNS request through a single recursive DNS service

Answer: DEF

NEW QUESTION 6
Which are three main features of the Meraki MX discussed in Cloud App Security module? (Choose three)

• A. Cloud-Brokered VPN
• B. Posture Assessment
• C. Intrusion Prevention
• D. Email Security
• E. Profiling
• F. Next Generation Firewall

Answer: CEF

NEW QUESTION 7
Which two Cisco products are part of the mobile threat-centric solution module? (Choose two.)

• A. Advanced sandboxing with Threat Grid
• B. Automated policy enforcement with ASAv
• C. Enhanced control access with ISE and Cloudlock
• D. Software-defined segmentation through TrustSec
• E. Enforced device security policies with Meraki

Answer: CE

NEW QUESTION 8
Which feature of Cisco ISE uses Cisco TrustSec Security Group Tags 10 edit networks dynamically rather than with VLANs?

• A. Device profiting and onboarding
• B. Role and device segmentation
• C. Guest Access
• D. Secure remote access

Answer: B

Explanation: ASAS Policy and Access SE Module 5

NEW QUESTION 9
Which Cisco solution falls under Advanced Threat?

• A. Umbrella
• B. Identity Services Engine
• C. Stealthwatch
• D. Threat Grid

Answer: C

Explanation: ASAS Security Advanced Threats SE Module 6

NEW QUESTION 10
Which are two main features of ASAv and NGFWv? (Choose two.)

• A. File trajectory
• B. API-based management
• C. File reputation
• D. Agile provisioning

Answer: BD

Explanation: ASAS Security NGFW and NGIPS SE Module 4

NEW QUESTION 11
Which Cisco Product is integrated with the AnyConnect Web Security Module?

• A. Cisco Stealthwatch
• B. Cisco Defense Orchestrator
• C. Cisco Cloud Web Security
• D. Cisco Email Security Appliance

Answer: C

Explanation: ASAS Policy and Access SE Module 5

NEW QUESTION 12
Which option helps customers gain insight into security threats?

• A. Limit volume of users to applications
• B. Share sensitive data across Afferent platforms
• C. Providing remote access VPN to allow mobile users to connect securely to customers network
• D. Providing visibility into everything to allow granular security policies to be created and enforced

Answer: D

NEW QUESTION 13
What are three major features of Cisco Defense Orchestrator? (Choose three.)

• A. Providing retrospective security to protect against malware
• B. Receive notifications about any unplanned changes to security policies and objects
• C. Plan and model security changes before deploying them across the cloud
• D. Identifying anomalous traffic in customer's network
• E. Ability to deploy changes across virtual environments in real time or offline
• F. Tracking suspicious files through the network

Answer: BCE

NEW QUESTION 14
Which are two main challenges of securing web and e-mail? (Choose two.)

• A. Cyber Crime is a growing industry
• B. Securing cloud apps
• C. Protecting against data centers
• D. 90% of cyber criminals use DNS in attacks

Answer: AD

NEW QUESTION 15
Which Policy and Access solution technology combines posture checks and authentication across wired, wireless, and VPN networks?

• A. Cisco AnyConnect
• B. Next Generation Intrusion Prevention System
• C. Cisco Stealthwatch
• D. ASA 2100 series

Answer: A

Explanation: Cisco Cloud Security SE - Module 3

NEW QUESTION 16
Which feature in the DNS security module provide on and off network DNS protection?

• A. Umbrella
• B. Layer-4 monitoring
• C. Real-time sandboxing
• D. Data Loss Prevention

Answer: A

NEW QUESTION 17
Which of AMP’s File capabilities deals with the problem of files passing through perimeter defenses that are later discovered to be a threat?

• A. Dynamic Analytics
• B. Trajectory
• C. Malware Security
• D. File Retrospection

Answer: D

Explanation: Tracks the spread of any file within your network and continuously monitors file reputation over time. If a file reputation changes to malicious or is found by file sandboxing to be malicious, AMP provides retrospective alerting in the after phase. AMP identifies every instance of the file within your network to address the problem of malicious files passing through perimeter defenses that are later deemed a threat.

NEW QUESTION 18
Which Cisco product is a part of the Data Center threat centric solution?

• A. Cloudlock
• B. Cisco Defense Orchestrator
• C. NGFWv
• D. Meraki MX

Answer: C

Explanation: ASAS Security Threat Centric Solutions - AM and SE Module 7