Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 91:

  What is an attribute of the DevSecOps process?

  A. mandated security controls and check lists
  B. security scanning and theoretical vulnerabilities
  C. development security
  D. isolated security team
  C. development security

  ---

  Explanation

  DevSecOps (development, security, and operations) is a concept used in recent years to describe how to movesecurity activities to the start of the development life cycle and have built-in security practices in the continuousintegration/ continuous deployment (CI/CD) pipeline. Thus minimizing vulnerabilities and bringing security closerto IT and business objectives.Three key things make a real DevSecOps environment:+ Security testing is done by the development team.+ Issues found during that testing is managed by the development team.+ Fixing those issues stays within the development team.

• Question 92:

  Which two fields are defined in the NetFlow flow? (Choose two)

  A. type of service byte
  B. class of service bits
  C. Layer 4 protocol type
  D. destination port
  E. output logical interface
  A. type of service byte
  D. destination port

  ---

  Explanation

  Cisco standard NetFlow version 5 defines a flow as a unidirectional sequence of packets that all share seven values which define a unique key for the flow:+ Ingress interface (SNMP ifIndex)+ Source IP address+ Destination IP address+ IP protocol+ Source port for UDP or TCP, 0 for other protocols+ Destination port for UDP or TCP, type and code for ICMP, or 0 for other protocols+ IP Type of ServiceNote:

  A flow is a unidirectional series of packets between a given source and destination.

• Question 93:

  A small organization needs to reduce the VPN bandwidth load on their headend Cisco ASA in order to ensure that bandwidth is available for VPN users needing access to corporate resources on the10.0.0.0/24 local HQ network. How is this accomplished without adding additional devices to the network?

  A. Use split tunneling to tunnel traffic for the 10.0.0.0/24 network only.
  B. Configure VPN load balancing to distribute traffic for the 10.0.0.0/24 network,
  C. Configure VPN load balancing to send non-corporate traffic straight to the internet.
  D. Use split tunneling to tunnel all traffic except for the 10.0.0.0/24 network.
  A. Use split tunneling to tunnel traffic for the 10.0.0.0/24 network only.

  ---

  Explanation

• Question 94:

  Which Secure Email Gateway(ESA) implementation method segregates inbound and outbound email?

  A. one listener on a single physical Interface
  B. pair of logical listeners on a single physical interface with two unique logical IPv4 addresses and one IPv6 address
  C. pair of logical IPv4 listeners and a pair Of IPv6 listeners on two physically separate interfaces
  D. one listener on one logical IPv4 address on a single logical interface
  C. pair of logical IPv4 listeners and a pair Of IPv6 listeners on two physically separate interfaces

  ---

  Explanation

• Question 95:

  Which problem Is solved by deploying a multicontext firewall?

  A. overlapping IP addressing plan
  B. more secure policy
  C. resilient high availability design
  D. faster inspection
  A. overlapping IP addressing plan

  ---

  Explanation

  A multicontext firewall is a feature that allows a single physical firewall to be divided into multiple virtual firewalls, also known as security contexts. Each context operates as an independent device, with its own security policy, interfaces, and administrators. This feature is useful for service providers, large enterprises, or any network that requires more than one firewall. One of the problems that a multicontext firewall can solve is an overlapping IP addressing plan. This means that different contexts can use the same IP addresses without causing conflicts, as long as they are separated by different interfaces or VLANs. This allows for more efficient use of IP address space and easier management of multiple networks. A multicontext firewall can also support dynamic routing protocols and VPNs within each context, providing more flexibility and functionality12 References := 1: What Are Multi-Context Firewalls? - Franklin Fitch 2:

  Multiple Context Mode - Cisco

• Question 96:

  DRAG DROP

  Drag and drop the deployment models from the left onto the corresponding explanations on the right.

  Select and Place:

  

  

• Question 97:

  Which attribute has the ability to change during the RADIUS CoA?

  A. NTP
  B. Authorization
  C. Accessibility
  D. Membership
  B. Authorization

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/ios- xml/ios/sec_usr_aaa/configuration/15-sy/sec-usr-aaa-15-sy-book/sec-rad-coa.html

• Question 98:

  Refer to the exhibit.

  

  What does the API key do while working with https://api.amp.cisco.com/v1/computers?

  A. displays client ID
  B. HTTP authorization
  C. Imports requests
  D. HTTP authentication
  D. HTTP authentication

  ---

  Explanation

• Question 99:

  What are two things to consider when using PAC files with the Cisco WSA? (Choose two.)

  A. If the WSA host port is changed, the default port redirects web traffic to the correct port automatically.
  B. PAC files use if-else statements to determine whether to use a proxy or a direct connection for traffic between the PC and the host.
  C. The WSA hosts PAC files on port 9001 by default.
  D. The WSA hosts PAC files on port 6001 by default.
  E. By default, they direct traffic through a proxy when the PC and the host are on the same subnet.
  B. PAC files use if-else statements to determine whether to use a proxy or a direct connection for traffic between the PC and the host.
  C. The WSA hosts PAC files on port 9001 by default.

  ---

  Explanation

  https://www.cisco.com/c/en/us/support/docs/security/web-security-appliance/118082-qanda-wsa-00.html

• Question 100:

  Which Cisco firewall solution supports configuration via Cisco Policy Language?

  A. NGFW
  B. CBAC
  C. IPS
  D. ZFW
  D. ZFW

  ---

  Explanation