Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 121:

  Which solution supports high availability in routed or transparent mode as well as in northbound and southbound deployments?

  A. Cisco FTD with Cisco ASDM
  B. Cisco FTD with Cisco FMC
  C. Cisco Firepower NGFW physical appliance with Cisco. FMC
  D. Cisco Firepower NGFW Virtual appliance with Cisco FMC
  B. Cisco FTD with Cisco FMC

  ---

  Explanation

• Question 122:

  Which service allows a user export application usage and performance statistics with Cisco Application Visibility and control?

  A. SNORT
  B. NetFlow
  C. SNMP
  D. 802.1X
  B. NetFlow

  ---

  Explanation

  Application Visibility and control (AVC) supports NetFlow to export application usage and performancestatistics. This data can be used for analytics, billing, and security policies.

• Question 123:

  An engineer is configuring Dropbox integration with Cisco Cloudlock. Which action must be taken before granting API access in the Dropbox admin console?

  A. Authorize Dropbox within the Platform settings in the Cisco Cloudlock portal.
  B. Add Dropbox to the Cisco Cloudlock Authentication and API section in the Cisco Cloudlock portal.
  C. Send an API request to Cisco Cloudlock from Dropbox admin portal.
  D. Add Cisco Cloudlock to the Dropbox admin portal.
  A. Authorize Dropbox within the Platform settings in the Cisco Cloudlock portal.

  ---

  Explanation

• Question 124:

  Which metric is used by the monitoring agent to collect and output packet loss and jitter information?

  A. WSAv performance
  B. AVC performance
  C. OTCP performance
  D. RTP performance
  D. RTP performance

  ---

  Explanation

• Question 125:

  Which method of attack is used by a hacker to send malicious code through a web application to an unsuspecting user to request that the victim's web browser executes the code?

  A. buffer overflow
  B. browser WGET
  C. SQL injection
  D. cross-site scripting
  D. cross-site scripting

  ---

  Explanation

• Question 126:

  Which algorithm provides asymmetric encryption?

  A. RC4
  B. AES
  C. RSA
  D. 3DES
  C. RSA

  ---

  Explanation

  https://www.cisco.com/c/en/us/products/security/encryption-explained.html#~types-of-encryption

  RSA is asymmetric cryptography, so there is one public key and one private key.

• Question 127:

  While using Cisco Secure Firewall's Security Intelligence policies, which two criteria is blocking based upon? (Choose two.)

  A. URLs
  B. MAC addresses
  C. Port numbers
  D. IP addresses
  E. Protocol IDs
  A. URLs
  D. IP addresses

  ---

  Explanation

• Question 128:

  Which Cisco AnyConnect module is integrated with Splunk Enterprise to provide monitoring capabilities to administrators to allow them to view endpoint application usage?

  A. AMP Enabler
  B. Umbrella Roaming Security
  C. ISE Posture
  D. Network Visibility
  D. Network Visibility

  ---

  Explanation

• Question 129:

  Which two prevention techniques are used to mitigate SQL injection attacks? (Choose two)

  A. Check integer, float, or Boolean string parameters to ensure accurate values.
  B. Use prepared statements and parameterized queries.
  C. Secure the connection between the web and the app tier.
  D. Write SQL code instead of using object-relational mapping libraries.
  E. Block SQL code execution in the web application database login.
  B. Use prepared statements and parameterized queries.
  E. Block SQL code execution in the web application database login.

  ---

  Explanation

• Question 130:

  A university policy must allow open access to resources on the Internet for research, but internal workstations are exposed to malware. Which Cisco AMP feature allows the engineering team to determine whether a file is installed on a selected few workstations?

  A. file prevalence
  B. file discovery
  C. file conviction
  D. file manager
  A. file prevalence

  ---

  Explanation