New 600-199 exam questions from PassLeader 600-199 dumps! Welcome to download the newest PassLeader 600-199 VCE and PDF dumps: http://www.passleader.com/600-199.html (60 Q&As)
P.S. Free 600-199 dumps are available on Google Drive shared by PassLeader: https://drive.google.com/open?id=0B-ob6L_QjGLpR0ozaTdjbGpid28
QUESTION 31
Which data from previous network attacks should be used to recommend architectural changes based on potential future impact?
A. SNMP statistics
B. known vulnerabilities
C. security audit reports
D. IPS signature logs
E. STP topology changes
Answer: A
QUESTION 32
Which three post-mortem steps are critical to help prevent a network attack from reoccurring? (Choose three.)
A. Document the incident in a report.
B. Collect “show” outputs after the attack.
C. Involve law enforcement officials.
D. Create a “lessons learned” collection.
E. Update the security rules for edge devices.
F. Revise the network security policy.
Answer: ADF
QUESTION 33
Refer to the exhibit. Which two personal administrators should be involved to investigate further? (Choose two.)
A. email administrator
B. IPS administrator
C. DNS administrator
D. desktop administrator
E. security administrator
Answer: CD
QUESTION 34
Which network management protocol relies on multiple connections between a managed device and the management station where such connections can be independently initiated by either side?
A. SSH
B. SNMP
C. Telnet
D. NetFlow
Answer: B
QUESTION 35
When an IDS generates an alert for a correctly detected network attack, what is this event called?
A. false positive
B. true negative
C. true positive
D. false negative
Answer: C
New 600-199 exam questions from PassLeader 600-199 dumps! Welcome to download the newest PassLeader 600-199 VCE and PDF dumps: http://www.passleader.com/600-199.html (60 Q&As)
P.S. Free 600-199 dumps are available on Google Drive shared by PassLeader: https://drive.google.com/open?id=0B-ob6L_QjGLpR0ozaTdjbGpid28
