Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 131:

  Which two global commands must the network administrator implement to limit the attack surface of an internet-facing Cisco router? (Choose two.)

  A. service tcp-keepalives-in
  B. no service password-recovery
  C. no cdp run
  D. no ip http server
  E. ip ssh version 2
  D. no ip http server
  E. ip ssh version 2

  ---

  Explanation

• Question 132:

  A security audit recently revealed that an administrator is using the same password of C1$c0448845217 for his personal account across multiple systems. What must be implemented by the company to reduce the chances of this happening again?

  A. centralized user authentication
  B. role based access control
  C. security awareness training
  D. strict password policies
  C. security awareness training

  ---

  Explanation

• Question 133:

  Which attack type attempts to shut down a machine or network so that users are not able to access it?

  A. smurf
  B. bluesnarfing
  C. MAC spoofing
  D. IP spoofing
  A. smurf

  ---

  Explanation

  Denial-of-service (DDoS) aims at shutting down a network or service, causing it to be inaccessible to itsintended users.The Smurf attack is a DDoS attack in which large numbers of Internet Control Message Protocol (ICMP)packets with the intended victim's spoofed source IP are broadcast to a computer network using an IPbroadcast address.

• Question 134:

  A network administrator is configuring a rule in an access control policy to block certain URLs and selects the "Chat and Instant Messaging" category. Which reputation score should be selected to accomplish this goal?

  A. 1
  B. 3
  C. 5
  D. 10
  A. 1

  ---

  Explanation

• Question 135:

  What is a benefit of using Cisco Tetration?

  A. It collects telemetry data from servers and then uses software sensors to analyze flow information.
  B. It collects policy compliance data and process details.
  C. It collects enforcement data from servers and collects interpacket variation.
  D. It collects near-real time data from servers and inventories the software packages that exist on servers.
  A. It collects telemetry data from servers and then uses software sensors to analyze flow information.

  ---

  Explanation

• Question 136:

  An administrator is trying to determine which applications are being used in the network but does not want the network devices to send metadata to Cisco Firepower. Which feature should be used to accomplish this?

  A. NetFlow
  B. Packet Tracer
  C. Network Discovery
  D. Access Control
  C. Network Discovery

  ---

  Explanation

  https://www.cisco.com/c/en/us/solutions/collateral/enterprise- networks/enterprise-network-security/white-paper-c11-736595.html

• Question 137:

  Which flaw does an attacker leverage when exploiting SQL injection vulnerabilities?

  A. user input validation in a web page or web application
  B. Linux and Windows operating systems
  C. database
  D. web page images
  A. user input validation in a web page or web application

  ---

  Explanation

  SQL injection usually occurs when you ask a user for input, like their username/userid, but the user gives("injects") you an SQL statement that you will unknowingly run on your database. For example:Look at the following example, which creates a SELECT statement by adding a variable (txtUserId) to a selectstring. The variable is fetched from user input (getRequestString):txtUserId = getRequestString("UserId");txtSQL = "SELECT * FROM Users WHERE UserId = " + txtUserId;If user enter something like this: "100 OR 1=1" then the SzQL statement will look like this:SELECT * FROM Users WHERE UserId = 100 OR 1=1;The SQL above is valid and will return ALL rows from the "Users" table, since OR 1=1 is always TRUE. Ahacker might get access to all the user names and passwords in this database.

• Question 138:

  What limits communication between applications or containers on the same node?

  A. microsegmentation
  B. container orchestration
  C. microservicing
  D. Software-Defined Access
  A. microsegmentation

  ---

  Explanation

• Question 139:

  Which two parameters are used for device compliance checks? (Choose two.)

  A. endpoint protection software version
  B. Windows registry values
  C. DHCP snooping checks
  D. DNS integrity checks
  E. device operating system version
  B. Windows registry values
  E. device operating system version

  ---

  Explanation

• Question 140:

  Which file type is supported when performing a bulk upload of destinations into a destination list on Cisco Umbrella?

  A. XLS
  B. RTF
  C. TXT
  D. CSV
  C. TXT

  ---

  Explanation