Online Access Free 300-745 Practice Test

A developer is building new API functions for a cloud-based application. Before writing the code, the developer wants to ensure that destructive actions, including deleting and updating data, are properly protected by access control identifying sensitive fields such as those that contain passwords or personally identifiable information. Which approach must be used to score the risks proactively?

• A.Open API Specification Analysis
• B.SAST
• C.CSPM
• D.SBOM Generation

Which Cisco product provides automated incident response workflows integrated with SIEM and SOAR platforms?

• A.Cisco SecureX
• B.Cisco AnyConnect
• C.Cisco DNA Center
• D.Cisco Catalyst

Which benefit does AI provide in network security?

• A.It replaces comprehensive defense in depth.
• B.It identifies vulnerabilities associated with weak TLS algorithms.
• C.It provides complete protection from DDoS attacks.
• D.It speeds up network data transmission rates.

An employee of a pharmaceutical company accidentally checked in code that contains AWS secret keys to a public GitHub repository, which exposes production resources to attackers.
Which mitigation strategy must a security engineer recommend to prevent future reoccurrence?

• A.Implement a phishing education campaign.
• B.Add a web application firewall.
• C.Implement a more granular port security strategy.
• D.Configure a SCM precommit hook.

An agricultural company wants to enhance the cybersecurity posture by implementing a defense- in-depth strategy to protect against polymorphic malware threats. Currently, the company's security infrastructure relies solely on a stateful traditional edge firewall that does not provide adequate protection against malware variants. Which technology must be added to the company's security architecture to achieve the goal?

• A.network performance monitor
• B.physical security control
• C.heuristics-based IPS
• D.web application firewall