Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 101:

  Which Cisco platform provides an agentless solution to provide visibility across the network including encrypted traffic analytics to detect malware in encrypted traffic without the need for decryption?

  A. Cisco Advanced Malware Protection
  B. Cisco Stealthwatch
  C. Cisco Identity Services Engine
  D. Cisco AnyConnect
  B. Cisco Stealthwatch

  ---

  Explanation

• Question 102:

  What are the two most commonly used authentication factors in multifactor authentication? (Choose two)

  A. biometric factor
  B. time factor
  C. confidentiality factor
  D. knowledge factor
  E. encryption factor
  A. biometric factor
  D. knowledge factor

  ---

  Explanation

  https://www.cisco.com/c/en/us/products/security/what-is-multi-factor- authentication.html

  The two most popular authentication factors are knowledge and inherent (including biometrics like fingerprint,face, and retina scans. Biometrics is used commonly in mobile devices).

• Question 103:

  Which portion of the network do EPP solutions solely focus on and EDR solutions do not?

  A. server farm
  B. perimeter
  C. core
  D. East-West gateways
  B. perimeter

  ---

  Explanation

• Question 104:

  Which solution is more secure than the traditional use of a username and password and encompasses at least two of the methods of authentication?

  A. RADIUS/LDAP authentication
  B. single-sign on
  C. Kerberos security solution
  D. multifactor authentication
  D. multifactor authentication

  ---

  Explanation

• Question 105:

  Which Cisco security solution determines if an endpoint has the latest OS updates and patches installed on the system?

  A. Cisco Endpoint Security Analytics
  B. Cisco AMP for Endpoints
  C. Endpoint Compliance Scanner
  D. Security Posture Assessment Service
  D. Security Posture Assessment Service

  ---

  Explanation

  https://www.cisco.com/c/dam/en_us/about/doing_business/legal/service_descriptions/docs/Security_Posture_Assessment_SPA_Support.pdf

• Question 106:

  An administrator is adding a new switch onto the network and has configured AAA for network access control. When testing the configuration, the RADIUS authenticates to Cisco ISE but is being rejected. Why is the ip radius source-interface command needed for this configuration?

  A. Only requests that originate from a configured NAS IP are accepted by a RADIUS server
  B. The RADIUS authentication key is transmitted only from the defined RADIUS source interface
  C. RADIUS requests are generated only by a router if a RADIUS source interface is defined.
  D. Encrypted RADIUS authentication requires the RADIUS source interface be defined
  A. Only requests that originate from a configured NAS IP are accepted by a RADIUS server

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/ios/12_2/security/command/reference/srfrad.html#wp1027454

• Question 107:

  When an assessment of cloud services and applications is conducted, which tool is used to show user activity and data usage across the applications?

  A. Cisco ASA
  B. Cisco CloudLock
  C. Cisco ISE
  D. Cisco AMP Private Cloud
  B. Cisco CloudLock

  ---

  Explanation

• Question 108:

  Which technology must be used to implement secure VPN connectivity among company branches over a private IP cloud with any-to-any scalable connectivity?

  A. DMVPN
  B. FlexVPN
  C. IPsec DVTI
  D. GET VPN
  D. GET VPN

  ---

  Explanation

  https://www.cisco.com/c/dam/en/us/products/collateral/security/group- encrypted-transport-vpn/GETVPN_DIG_version_2_0_External.pdf

• Question 109:

  How does Cisco AMP for Endpoints provide next-generation protection?

  A. It encrypts data on user endpoints to protect against ransomware.
  B. It leverages an endpoint protection platform and endpoint detection and response.
  C. It utilizes Cisco pxGrid, which allows Cisco AMP to pull threat feeds from threat intelligence centers.
  D. It integrates with Cisco FTD devices.
  B. It leverages an endpoint protection platform and endpoint detection and response.

  ---

  Explanation

• Question 110:

  What is the most commonly used protocol for network telemetry?

  A. NetFlow
  B. SNMP
  C. TFTP
  D. SMTP
  A. NetFlow

  ---

  Explanation