Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 161:

  Which feature is used in a push model to allow for session identification, host reauthentication, and session termination?

  A. AAA attributes
  B. CoA request
  C. AV pair
  D. carrier-grade NAT
  B. CoA request

  ---

  Explanation

• Question 162:

  Refer to the exhibit. A network engineer must configure a Cisco router to send traps using SNMPv3. The engineer configures a remote user to receive traps and sets the security level to use authentication without privacy. Which command completes the configuration?

  A. snmp-server host 10.12.8.4 informs version 3 noauthno remoteuser config
  B. snmp-server host 10.12.8.4 informs version 3 noauthnoPriv remoteuser config
  C. snmp-server user TrapUser group2 remote 10.12.8.4 v3 auth md5 password1
  D. snmp-server user TrapUser group2 remote 10.12.8.4 v3 auth md5 password1 priv access des56
  C. snmp-server user TrapUser group2 remote 10.12.8.4 v3 auth md5 password1

  ---

  Explanation

• Question 163:

  Which action blocks specific IP addresses whenever a computer with Cisco Secure Endpoint installed connects to the network?

  A. Create an application block list and add the IP addresses.
  B. Create an IP Block and Allow list and add the IP addresses.
  C. Create an advanced custom detection policy and add the IP addresses.
  D. Create a simple custom detection policy and add the IP addresses.
  B. Create an IP Block and Allow list and add the IP addresses.

  ---

  Explanation

• Question 164:

  Which two conditions are prerequisites for stateful failover for IPsec? (Choose two)

  A. Only the IKE configuration that is set up on the active device must be duplicated on the standby device; the IPsec configuration is copied automatically
  B. The active and standby devices can run different versions of the Cisco IOS software but must be the same type of device.
  C. The IPsec configuration that is set up on the active device must be duplicated on the standby device
  D. Only the IPsec configuration that is set up on the active device must be duplicated on the standby device; the IKE configuration is copied automatically.
  E. The active and standby devices must run the same version of the Cisco IOS software and must be the same type of device
  C. The IPsec configuration that is set up on the active device must be duplicated on the standby device
  E. The active and standby devices must run the same version of the Cisco IOS software and must be the same type of device

  ---

  Explanation

  Stateful failover for IP Security (IPsec) enables a router to continue processing and forwarding IPsec packetsafter a planned or unplanned outage occurs. Customers employ a backup (secondary) router that automaticallytakes over the tasks of the active (primary) router if the active router loses connectivity for any reason. Thisfailover process is transparent to users and does not require adjustment or reconfiguration of any remote peer.Stateful failover for IPsec requires that your network contains two identical routers that are available to be eitherthe primary or secondary device. Both routers should be the same type of device, have the same CPU andmemory, and have either no encryption accelerator or identical encryption accelerators.Prerequisites for Stateful Failover for IPsec Reference: https://www.cisco.com/c/en/us/td/docs/ios- xml/ios/sec_conn_vpnav/configuration/15-mt/sec-vpnavailability-15-mt-book/sec-state-fail- ipsec.htmlAlthough the prerequisites only stated that "Both routers should be the same type of device" but in the"Restrictions for Stateful Failover for IPsec" section of the link above, it requires "Both the active and standby devices must run the identical version of the Cisco IOS software" so answer E is better than answer B.

• Question 165:

  What Cisco command shows you the status of an 802.1X connection on interface gi0/1?

  A. show authorization status
  B. show authen sess int gi0/1
  C. show connection status gi0/1
  D. show ver gi0/1
  B. show authen sess int gi0/1

  ---

  Explanation

• Question 166:

  How does Cisco Workload Optimization portion of the network do EPP solutions solely performance issues?

  A. It deploys an AWS Lambda system
  B. It automates resource resizing
  C. It optimizes a flow path
  D. It sets up a workload forensic score
  B. It automates resource resizing

  ---

  Explanation

• Question 167:

  Email security has become a high-priority task for a security engineer at a large multi-national organization due to ongoing phishing campaigns.

  To help control this, the engineer has deployed an Incoming Content Filter with a URL reputation of (-10.00 to -6.00) on the Cisco ESA.

  Which action will the system perform to disable any links in messages that match the filter?

  A. Defang
  B. Quarantine
  C. FilterAction
  D. ScreenAction
  A. Defang

  ---

  Explanation

  In Cisco Email Security Appliance (ESA), the Defang action is used to disable or neutralize URLs in email messages that match certain filters - such as those with poor URL reputations. This action modifies the URLs so they are no longer clickable, helping to prevent users from accidentally accessing potentially malicious sites.

• Question 168:

  An engineer implements Cisco CloudLock to secure a Microsoft Office 365 application in the cloud. The engineer must configure protection for corporate files in case of any incidents. Which two actions must be taken to complete the implementation? (Choose two.)

  A. Remove all users as collaborators on the files.
  B. Transfer ownership of the files to a specified owner and folder.
  C. Expire the public share URL.
  D. Disable the ability for commenters and viewers to download and copy the files.
  E. Send Cisco Webex message to specified users when an incident is triggered.
  B. Transfer ownership of the files to a specified owner and folder.
  C. Expire the public share URL.

  ---

  Explanation

• Question 169:

  What is a capability of Cisco AVC?

  A. application bandwidth enforcement on Cisco IOS platforms
  B. interoperates by using GET VPN on tunnel interfaces
  C. traffic filtering by using a Security Intelligence policy
  D. deep packet inspection on IPsec encapsulated traffic
  A. application bandwidth enforcement on Cisco IOS platforms

  ---

  Explanation

• Question 170:

  Which capability is exclusive to a Cisco AMP public cloud instance as compared to a private cloud instance?

  A. RBAC
  B. ETHOS detection engine
  C. SPERO detection engine
  D. TETRA detection engine
  B. ETHOS detection engine

  ---

  Explanation