Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 111:

  What is a benefit of an endpoint patch management strategy?

  A. Patches are deployed without a testing phase.
  B. Fewer staff is needed to manage the endpoints.
  C. Endpoints are resistant to vulnerabilities.
  D. Ensures adherence to regulatory and compliance standards.
  D. Ensures adherence to regulatory and compliance standards.

  ---

  Explanation

• Question 112:

  What is a feature of NetFlow Secure Event Logging?

  A. It exports only records that indicate significant events in a flow.
  B. It filters NSEL events based on the traffic and event type through RSVP.
  C. It delivers data records to NSEL collectors through NetFlow over TCP only.
  D. It supports v5 and v8 templates.
  A. It exports only records that indicate significant events in a flow.

  ---

  Explanation

• Question 113:

  What is the recommendation in a zero-trust model before granting access to corporate applications and resources?

  A. to use multifactor authentication
  B. to use strong passwords
  C. to use a wired network, not wireless
  D. to disconnect from the network when inactive
  A. to use multifactor authentication

  ---

  Explanation

• Question 114:

  The security team has installed a Cisco Secure Email Gateway. During setup, a large number of email messages containing the string "abcde1111111111" are being blocked. The security team wants to investigate and determine if the emails are part of a phishing or malware attack. Which configuration step must the security team apply?

  A. Implement a policy to only allow email from trusted to the network senders.
  B. Apply a policy to route all blocked emails to a separate quarantine folder.
  C. Configure sender domain reputation policy to check if sender email domain is known to be malicious.
  D. Configure a policy to disable spam filtering in order to expedite email delivery.
  B. Apply a policy to route all blocked emails to a separate quarantine folder.

  ---

  Explanation

• Question 115:

  Refer to the exhibit. A company named ABC has a Cisco Secure Email Gateway and an engineer must configure the incoming mail policy so that emails containing malware files are quarantined instead of dropped and to prevent an increase in false positives causing emails to be dropped erroneously. What must be configured on the Secure Email Gateway?

  

  A. Change the Policies Order.
  B. Open Default Policy, Malware File, and then Action Applied to Message.
  C. Delete usera1 policy.
  D. Open usera1 policy, Messages with Malware Attachments, and then Action Applied to Message.
  D. Open usera1 policy, Messages with Malware Attachments, and then Action Applied to Message.

  ---

  Explanation

• Question 116:

  When Cisco and other industry organizations publish and inform users of known security findings and vulnerabilities, which name is used?

  A. Common Security Exploits
  B. Common Vulnerabilities and Exposures
  C. Common Exploits and Vulnerabilities
  D. Common Vulnerabilities, Exploits and Threats
  B. Common Vulnerabilities and Exposures

  ---

  Explanation

  CCNP And CCIE Security Core SCOR 350-701 Official Cert Guide

• Question 117:

  What is provided by the Secure Hash Algorithm in a VPN?

  A. integrity
  B. key exchange
  C. encryption
  D. authentication
  A. integrity

  ---

  Explanation

  https://www.ciscopress.com/articles/article.asp?p=24833andseqNum=4

• Question 118:

  An organization has two systems in their DMZ that have an unencrypted link between them for communication.

  The organization does not have a defined password policy and uses several default accounts on the systems.

  The application used on those systems also have not gone through stringent code reviews.

  Which vulnerability would help an attacker brute force their way into the systems?

  A. weak passwords
  B. lack of input validation
  C. missing encryption
  D. lack of file permission
  A. weak passwords

  ---

  Explanation

• Question 119:

  Which solution provides end-to-end visibility of applications and insights about application performance?

  A. Cisco AppDynamics
  B. Cisco Tetration
  C. Cisco Secure Cloud Analytics
  D. Cisco Cloudlock
  A. Cisco AppDynamics

  ---

  Explanation

• Question 120:

  Which technology should be used to help prevent an attacker from stealing usernames and passwords of users within an organization?

  A. RADIUS-based REAP
  B. fingerprinting
  C. Dynamic ARP Inspection
  D. multifactor authentication
  C. Dynamic ARP Inspection

  ---

  Explanation