Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 151:

  Which Cisco security solution provides patch management in the cloud?

  A. Cisco Umbrella
  B. Cisco ISE
  C. Cisco CloudLock
  D. Cisco Tetration
  D. Cisco Tetration

  ---

  Explanation

• Question 152:

  What does the Cloudlock Apps Firewall do to mitigate security concerns from an application perspective?

  A. It allows the administrator to quarantine malicious files so that the application can function, just not maliciously.
  B. It discovers and controls cloud apps that are connected to a company's corporate environment.
  C. It deletes any application that does not belong in the network.
  D. It sends the application information to an administrator to act on.
  B. It discovers and controls cloud apps that are connected to a company's corporate environment.

  ---

  Explanation

• Question 153:

  Which Cisco platform processes behavior baselines, monitors for deviations, and reviews for malicious processes in data center traffic and servers while performing software vulnerability detection?

  A. Cisco Secure Client
  B. Cisco ISE
  C. Cisco Secure Workload
  D. Cisco AMP for Network
  C. Cisco Secure Workload

  ---

  Explanation

• Question 154:

  What are two functions of secret key cryptography? (Choose two)

  A. key selection without integer factorization
  B. utilization of different keys for encryption and decryption
  C. utilization of large prime number iterations
  D. provides the capability to only know the key on one side
  E. utilization of less memory
  A. key selection without integer factorization
  E. utilization of less memory

  ---

  Explanation

• Question 155:

  In a PaaS model, which layer is the tenant responsible for maintaining and patching?

  A. hypervisor
  B. virtual machine
  C. network
  D. application
  D. application

  ---

  Explanation

  https://www.bmc.com/blogs/saas-vs-paas-vs-iaas-whats-the-difference-and-how-to-choose/

• Question 156:

  Which solution allows an administrator to provision, monitor, and secure mobile devices on Windows and Mac computers from a centralized dashboard?

  A. Cisco Umbrella
  B. Cisco AMP for Endpoints
  C. Cisco ISE
  D. Cisco Stealthwatch
  C. Cisco ISE

  ---

  Explanation

• Question 157:

  For which two conditions can an endpoint be checked using ISE posture assessment? (Choose two)

  A. Windows service
  B. computer identity
  C. user identity
  D. Windows firewall
  E. default browser
  A. Windows service
  D. Windows firewall

  ---

  Explanation

• Question 158:

  Which suspicious pattern enables the Cisco Tetration platform to learn the normal behavior of users?

  A. file access from a different user
  B. interesting file access
  C. user login suspicious behavior
  D. privilege escalation
  A. file access from a different user

  ---

  Explanation

  Table 1. Cisco Tetration platform primary features and benefits Feature Benefit Zero-trust model using microsegmentation Cisco Tetration platform allows only the required traffic between application components and users, blocking everything else. This approach prevents a persistent threat from entering or searching for additional vulnerabilities.

  Also allows for micro segmentation so you can deny file access from different users.

  https://cdw-prod.adobecqms.net/content/dam/cdw/on-domain-cdw/brands/cisco/data-center-tetration-data-sheet.pdf

• Question 159:

  What is an advantage of using a next-generation firewall compared to a traditional firewall?

  A. Next-generation firewalls have stateless inspection capabilities, and traditional firewalls use stateful inspection.
  B. Next-generation firewalls use dynamic packet filtering, and traditional firewalls use static packet filtering.
  C. Next-generation firewalls have threat intelligence feeds, and traditional firewalls use signature detection.
  D. Next-generation firewalls use intrusion prevention policies, and traditional firewalls use intrusion detection policies.
  C. Next-generation firewalls have threat intelligence feeds, and traditional firewalls use signature detection.

  ---

  Explanation

• Question 160:

  Refer to the exhibit.

  

  What are two indications of the Cisco Firepower Services Module configuration? (Choose two.)

  A. The module is operating in IDS mode.
  B. The module fails to receive redirected traffic
  C. Traffic is blocked if the module fails.
  D. Traffic continues to flow if the module fails.
  E. The module is operating in IPS mode.
  A. The module is operating in IDS mode.
  D. Traffic continues to flow if the module fails.

  ---

  Explanation

  sfr {fail-open | fail-close [monitor-only]} <- There's a couple different options here. The first one is fail-open which means that if the Firepower software module is unavailable, the ASA will continue to forward traffic. fail-close means that if the Firepower module fails, the traffic will stop flowing. While this doesn't seem ideal, there might be a use case for it when securing highly regulated environments. The monitor-only switch can be used with both and basically puts the Firepower services into IDS-mode only.

  This might be useful for initial testing or setup.