CCNP SCE

Question 1

1.	Which feature requires a network discovery policy on the Cisco Firepower Next Generation Intrusion Prevention System?

Accepted Answer

security intelligence

Answer

impact flags

Answer

health monitoring

Answer

URL filtering

Question 2

2.	Which two preventive measures are used to control cross-site scripting? (Choose two.)

Accepted Answer

Enable client-side scripts on a per-domain basis.

Accepted Answer

Incorporate contextual output encoding/escaping.

Answer

Disable cookie inspection in the HTML inspection engine.

Answer

Run untrusted HTML input through an HTML sanitization engine.

Answer

SameSite cookie attribute should not be used.

Question 3

3.	Refer to the exhibit.
Which statement about the authentication protocol used in the configuration is true?

Accepted Answer

The authentication and authorization requests are grouped in a single packet.

Answer

The authentication request contains only a password

Answer

The authentication request contains only a username

Answer

There are separate authentication and authorization request packets.

Question 4

4. Which command was used to generate this output and to show which ports are authenticating with dot1x or mab?

Accepted Answer

show authentication method

Answer

show authentication registrations

Answer

show dot1x all

Answer

show authentication sessions

Question 5

Refer to the exhibit_ An engineer must establish eBGP peerning between router R3 and router R4. Both routers should use their loopback interfaces as the BGP router ID. Which configuration set accomplishes this task?

Accepted Answer

R3(config)# router bgp 200
R3(config-router)# neighbor 10.24.24.4 remote-as 100
R3(config-router)# bgp router-id 10.3.3.3

R4(config)# router bgp 100
R4(config-router)# neighbor 10.24.24.3 remote-as 200
R4(config-router)# bgp router-id 10.4.4.4

Answer

R3(config)# router bgp 200
R3(config-router)# neighbor 10.4.4.4 remote-as100
R3(config-router)# neighbor 10.4.4.4 update-source Loopback0

Answer

R4(config)# router bgp 100
R4(config-router)# neighbor 10.3.3.3 remote-as 200
R4(config-router)# neighbor 10.3.3.3 update-source Loopback0

R3(config)# router bgp 200
R3(config-router)# neighbor 10.4.4.4 remote-as 100
R3(config-router)# bgp router-id 10.3.3.3

R4(config)# router bgp 100
R4(config-router)# neighbor 10.3.3.3 remote-as 200
R4(config-router)# bgp router-id 10.4.4.4

Answer

R3(config)# router bgp 200
R3(config-router)# neighbor 10.24.24.4 remote-as 100
R3(config-router)# neighbor 10.24.24.4 update-source Loopback0

R4(config)# router bgp 100
R4(config-router)# neighbor 10.24.24.3 remote-as 200
R4(config-router)# neighbor 10.24.24.3 update-source Loopback0

CCNP SCE

Information

Feedback

What do you think of the new look?