Citrix Certifications

Question No. 1

An engineer must deploy email security to a large enterprise with multiple offices. Each office cannot support its own ESA appliance. What technology best supports email security across the organization?

• A. Cloud Email Security
• B. Hybrid Email Security
• C. Virtual Email Security Appliance
• D. Physical Email Security Appliance

Question No. 2

In which way are packets handled when the IPS internal zone is set to “disabled”?

• A. All packets are dropped to the external zone.
• B. All packets are dropped to the internal zone.
• C. All packets are ignored in the internal zone.
• D. All packets are sent to the default external zone.

Question No. 3

After deploying a Cisco ESA on your network, you notice that some messages fail to reach their destinations.

Which task can you perform to determine where each message was lost?

• A. Configure the trackingconfig command to enable message tracking.
• B. Generate a system report.
• C. Review the log files.
• D. Perform a trace.

Question No. 4

When centralized message tracking is enabled on the Cisco ESA, over which port does the communication to the SMA occur by default?

• A. port 2222/TCP
• B. port 443/TCP
• C. port 25/TCP
• D. port 22/TCP

Question No. 5

User wants to deploy your managed device in Layer 3 routed mode and must configure a virtual router and a routed interface. Which managed shows this configuration?

• A. Cisco FirePOWER services on a Cisco ASA 5500x.
• B. virtual NGIPS
• C. Cisco FirePOWER module on a Cisco ASA 5585x.
• D. Cisco FirePOWER appliance.

Question No. 6

Which two conditions must you configure in an event action rule to match all IPv4 addresses in the victim range and filter on the complete subsignature range? (Choose two.)

• A. Disable event action override.
• B. Leave the victim address range unspecified.
• C. Set the subsignature ID-range to the default.
• D. Set the deny action percentage to 100.
• E. Set the deny action percentage to 0.

Question No. 7

Which Cisco ASA configuration command drops traffic if the Cisco ASA CX module fails?

• A. no fail-open
• B. fail-close
• C. fail-close auth-proxy
• D. auth-proxy

Question No. 8

Who or what calculates the signature fidelity rating?

• A. the signature author
• B. Cisco Professional Services
• C. the administrator
• D. the security policy

Question No. 9

Which CLI command is used to register a Cisco FirePOWER sensor to Firepower Management Center?

• A. configure system add
• B. configure manager add host
• C. configure manager delete
• D. configure manger add

Question No. 10

Scenario

What is the maximum message size that the Cisco Email Security Appliance will accept from the violet.public domain?

• A. 1 KB
• B. 100 KB
• C. 1 MB
• D. 10 MB
• E. 100 MB
• F. Unlimited

Question No. 11

What is the main purpose of the default intrusion policy?

• A. It can protect against passing malicious packets before an access-control rule can identify the source application or URL
• B. It can preflag known malware to eliminate the need for further inspection
• C. It can enforce additional rules after the system has identified the default access-control rule
• D. It balances security and connectivity considerations by default when you choose the Network Discovery default action

Question No. 12

What is difference between a Cisco Content Security Management virtual appliance and a physical appliance?

• A. Migration between virtual appliance of varying sizes is possible, but physical appliances must be of equal size.
• B. The virtual appliance requires an additional license to run on a host.
• C. The virtual appliance requires an additional license to activate its adapters.
• D. The physical appliance is configured with a DHCP-enabled management port to receive an IP Address automatically, but you must assign the virtual appliance an IP address manually in your management subnet.