SCOR Quizizz Questions

Which common defense-in-depth method can help reduce the attack surface?

• Use 8-character passwords.
• Replace copper connections with fiber-based connections.
• Deploy IPS, firewalls, and AAA-based platforms and services.
• Use UDP protocols to preserve bandwidth and protocol overhead.
• Place systems on Internet-facing DMZ links to control traffic flows.

What is the name of the stateful firewall feature available on Cisco IOS routers?

• Zone-Based Policy Firewall
• IOS Stateful Firewall
• Stateful Router Firewall
• Zone-Based IOS Firewall
• Stateful IOS Firewall

Which feature on Cisco’s Firepower Management Center (FMC) is an example of leveraging shared threat intelligence information?

• Cisco STIX
• Cisco Threat Intelligence Director
• Cisco TAXII
• Cisco Security Intelligence
• Cisco Talos Intelligence

Which option can be used to represent the network 192.168.1.0/24 as an object?

• network object
• service object
• network object group
• service object group

Which communication is allowed by default on the Cisco ASA appliance?

• traffic from a lower security level interface to a higher security level interface
• traffic between interfaces with same security level
• traffic from a higher security level interface to a lower security level interface
• traffic entering and exiting the same interface

Cisco ASA forwards packets based on different parameters when running in routed and transparent mode. On which parameter is the packet forwarding process on Cisco ASA running in transparent mode based on?

• source IP address
• destination MAC address
• destination IP address
• source MAC address

Which engine in the Cisco FTD software is responsible for inspecting traffic against security intelligence and IPS features?

• Snort engine
• ASA engine
• Firewall engine
• IPS engine

Which ACP rule action will allow you to send traffic for additional inspection against IPS policy?

• Trust
• Allow
• Block
• Monitor

Which type of Cisco Firepower discovery is NMAP an example of?

• passive discovery
• identity discovery
• user discovery
• active discovery

Which two engines are disabled by default in the default outgoing mail policy on Cisco ESA? (Choose two.)

• Antispam
• Antivirus
• message filters
• outbreak filters
• content filters