A Cisco ESA network administrator has been tasked to use a newly installed service to help create policy based on the reputation verdict. During testing, it is discovered that the Cisco ESA is not dropping files that have an undetermined verdict.What is causing this issue?
Answer(s): D
Maybe the "newly installed service" in this Qmentions about Advanced Malware Protection (AMP) which can be used along with ESA. AMP allows superior protection across the attack continuum. + File Reputation captures a fingerprint of each file as it traverses the ESA and sends it to AMP's cloudbased intelligence network for a reputation verdict. Given these results, you can automatically block malicious files and apply administrator-defined policy. + File Analysis provides the ability to analyze unknown files that are traversing the ESA. A highly secure sandbox environment enables AMP to glean precise details about the file's behavior and to combine that data with detailed human and machine analysis to determine the file's threat level. This disposition is then fed into AMP cloud-based intelligence network and used to dynamically update and expand the AMP cloud data set for enhanced protection
An administrator is trying to determine which applications are being used in the network but does not want the network devices to send metadata to Cisco Firepower.Which feature should be used to accomplish this?
Answer(s): A
NetFlow is a network protocol developed by Cisco for the collection and monitoring of network traffic flow data generated by NetFlow-enabled routers and switches. The flows do not contain actual packet data, but rather the metadata for communications. It is a standard form of session data that details who, what, when, and where of network traffic -> Answer A is not correct.
https://www.cisco.com/c/en/us/solutions/collateral/enterprise-networks/enterprise- network-security/white-paper-c11-736595.html
Which attack is preventable by Cisco ESA but not by the Cisco WSA?
The following are the benefits of deploying Cisco Advanced Phishing Protection on the Cisco Email SecurityGateway:Prevents the following:+ Attacks that use compromised accounts and social engineering. + Phishing, ransomware, zero-day attacks and spoofing.+ BEC with no malicious payload or URL.
https://www.cisco.com/c/en/us/td/docs/security/esa/esa13- 5/user_guide/b_ESA_Admin_Guide_13-5/m_advanced_phishing_protection.html
A Cisco ESA administrator has been tasked with configuring the Cisco ESA to ensure there are no viruses before quarantined emails are delivered. In addition, delivery of mail from known bad mail servers must be prevented.Which two actions must be taken in order to meet these requirements? (Choose two)
Answer(s): A,E
We should scan emails using AntiVirus signatures to make sure there are no viruses attached in emails.Note: A virus signature is the fingerprint of a virus. It is a set of unique data, or bits of code, that allow it to be identified. Antivirus software uses a virus signature to find a virus in a computer file system, allowing to detect, quarantine, and remove the virus. SenderBase is an email reputation service designed to help email administrators research senders, identify legitimate sources of email, and block spammers.When the Cisco ESA receives messages from known or highly reputable senders, it delivers them directly to the end user without any content scanning. However, when the Cisco ESA receives email messages from unknown or less reputable senders, it performs antispam and antivirus scanning.
https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_0100100.html -> Therefore Outbreak filters can be used to block emails from bad mail servers. Web servers and email gateways are generally located in the DMZ so Note: The recipient access table (RAT), not to be confused with remote-access Trojan (also RAT), is a Cisco ESA term that defines which recipients are accepted by a public listener.
Which type of dashboard does Cisco DNA Center provide for complete control of the network?
Answer(s): B
Cisco's DNA Center is the only centralized network management system to bring all of this functionality into a single pane of glass.
https://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/dna- center/nb-06- dna-center-faq-cte-en.html
Post your Comments and Discuss Cisco 350-701 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 350-701 content, but please register or login to continue.