Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 1:

  When network telemetry is implemented, what is important to be enabled across all network infrastructure devices to correlate different sources?

  A. CDP
  B. syslog
  C. NTP
  D. DNS
  C. NTP

  ---

  Explanation

• Question 2:

  What is a feature of container orchestration?

  A. ability to deploy Amazon ECS clusters by using the Cisco Container Platform data plane
  B. ability to deploy Amazon EKS clusters by using the Cisco Container Platform data plane
  C. ability to deploy Kubernetes clusters in air-gapped sites
  D. automated daily updates
  C. ability to deploy Kubernetes clusters in air-gapped sites

  ---

  Explanation

• Question 3:

  DRAG DROP

  Drag and drop the features of Cisco ASA with Firepower from the left onto the benefits on the right

  Select and Place:

  

  

• Question 4:

  What are two workloaded security models? (Choose two)

  A. SaaS
  B. IaaS
  C. on-premises
  D. off-premises
  E. PaaS
  C. on-premises
  D. off-premises

  ---

  Explanation

• Question 5:

  Which security solution is used for posture assessment of the endpoints in a BYOD solution?

  A. Cisco FTD
  B. Cisco ASA
  C. Cisco Umbrella
  D. Cisco ISE
  D. Cisco ISE

  ---

  Explanation

• Question 6:

  Refer to the exhibit.

  

  What is the function of the Python script code snippet for the Cisco ASA REST API?

  A. adds a global rule into policies
  B. changes the hostname of the Cisco ASA
  C. deletes a global rule from policies
  D. obtains the saved configuration of the Cisco ASA firewall
  A. adds a global rule into policies

  ---

  Explanation

• Question 7:

  What is the purpose of the Cisco Endpoint loC feature?

  A. It provides stealth threat prevention.
  B. lt is a signature-based engine.
  C. lt is an incident response tool
  D. It provides precompromise detection.
  C. lt is an incident response tool

  ---

  Explanation

  The Endpoint Indication of Compromise (IOC) feature is a powerful incident response tool for scanning of post-compromise indicators across multiple computers.

  https://www.cisco.com/c/dam/en_us/about/doing_business/legal/service_descriptions/docs/ Cisco_Secure_Managed_Endpoint.pdf

• Question 8:

  Refer to the exhibit.

  

  An administrator is adding a new Cisco FTD device to their network and wants to manage it with Cisco FMC.

  The Cisco FTD is not behind a NAT device. Which command is needed to enable this on the Cisco FTD?

  A. configure manager add DONTRESOLVE kregistration key>
  B. configure manager add 16
  C. configure manager add DONTRESOLVE FTD123
  D. configure manager add
  D. configure manager add

  ---

  Explanation

  https://cyruslab.net/2019/09/03/ciscocisco-firepower-lab-setup/

• Question 9:

  An engineer must configure Cisco AMP for Endpoints so that it contains a list of files that should not be executed by users. These files must not be quarantined. Which action meets this configuration requirement?

  A. Modify the advanced custom detection list to include these files.
  B. Add a list for simple custom detection.
  C. Identify the network IPs and place them in a blocked list.
  D. Create an application control blocked applications list.
  D. Create an application control blocked applications list.

  ---

  Explanation

• Question 10:

  Which encryption algorithm provides highly secure VPN communications?

  A. 3DES
  B. AES 256
  C. AES 128
  D. DES
  B. AES 256

  ---

  Explanation