nerdexam
Cisco

300-710 · Question #251

Refer to the exhibit. An engineer is analyzing a Network Risk Report from Cisco FMC. Which application must the engineer take immediate action against to prevent unauthorized network use?

The correct answer is D. TOR. TOR (The Onion Router) is an anonymity network often used to bypass security controls and hide user activity, making its detection in a Network Risk Report a strong indicator of unauthorized network use requiring immediate action.

Management and Troubleshooting

Question

Refer to the exhibit. An engineer is analyzing a Network Risk Report from Cisco FMC. Which application must the engineer take immediate action against to prevent unauthorized network use?

Exhibit

300-710 question #251 exhibit

Options

  • AKerberos
  • BYouTube
  • CChrome
  • DTOR

How the community answered

(33 responses)
  • A
    6% (2)
  • B
    3% (1)
  • C
    9% (3)
  • D
    82% (27)

Why each option

TOR (The Onion Router) is an anonymity network often used to bypass security controls and hide user activity, making its detection in a Network Risk Report a strong indicator of unauthorized network use requiring immediate action.

AKerberos

Kerberos is a legitimate and widely used network authentication protocol essential for securing many enterprise services, and blocking it would severely disrupt authorized network operations.

BYouTube

YouTube is a legitimate video-sharing platform, and while it might be blocked for productivity reasons, it does not inherently represent "unauthorized network use" or a security threat in the same way as an anonymity network.

CChrome

Chrome is a standard web browser, a fundamental tool for network access. Blocking it would prevent all legitimate web-based network use, not just unauthorized activity.

DTORCorrect

TOR (The Onion Router) is an anonymity network commonly used to bypass security controls, obscure user identity, and access potentially illicit content, thus representing a significant risk for unauthorized network use in an enterprise environment. Its presence warrants immediate investigation and action to prevent data exfiltration or policy violations.

Concept tested: Identifying high-risk applications

Source: https://www.cisco.com/c/en/us/products/security/firewalls/what-is-tor.html

Topics

#Network Security#Cisco FMC#Application Control#Risk Management

Community Discussion

No community discussion yet for this question.

Full 300-710 Practice