Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 11:

  An engineer needs to configure a Cisco Secure Email Gateway (SEG) to prompt users to enter multiple forms of identification before gaining access to the SEG.

  The SEG must also join a cluster using the preshared key of cisc421555367. What steps must be taken to support this?

  A. Enable two-factor authentication through a RADIUS server, and then join the cluster via the SEG GUI.
  B. Enable two-factor authentication through a TACACS+ server, and then join the cluster via the SEG CLI.
  C. Enable two-factor authentication through a RADIUS server, and then join the cluster via the SEG CLI
  D. Enable two-factor authentication through a TACACS+ server, and then join the cluster via the SEG GUI.
  C. Enable two-factor authentication through a RADIUS server, and then join the cluster via the SEG CLI

  ---

  Explanation

  https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/200885-ESA-Cluster-Requirements-and-Setup.html#toc-hId-1251782448

• Question 12:

  An administrator configures new authorization policies within Cisco ISE and has difficulty profiling the devices. Attributes for the new Cisco IP phones that are profiled based on the RADIUS authentication are seen however the attributes for CDP or DHCP are not. What should the administrator do to address this issue?

  A. Configure the ip dhcp snooping trust command on the DHCP interfaces to get the information to Cisco ISE
  B. Configure the authentication port-control auto feature within Cisco ISE to identify the devices that are trying to connect
  C. Configure a service template within the switch to standardize the port configurations so that the correct information is sent to Cisco ISE
  D. Configure the device sensor feature within the switch to send the appropriate protocol information
  D. Configure the device sensor feature within the switch to send the appropriate protocol information

  ---

  Explanation

  https://www.cisco.com/c/en/us/support/docs/security/identity-services- engine/200292-ConfigureDevice-Sensor-for-ISE-Profilin.html

• Question 13:

  Refer to the exhibit. Which task is the Python script performing by using the Umbrella Enforcement API?

  

  A. importing malicious domains to Cisco Umbrella Enforcement for additional processing
  B. importing malicious domains to Cisco Umbrella Enforcement for blocking
  C. editing malicious domains in Cisco Umbrella Enforcement that have changed status
  D. editing malicious domains in Cisco Umbrella Enforcement that have changed IP address
  B. importing malicious domains to Cisco Umbrella Enforcement for blocking

  ---

  Explanation

• Question 14:

  Which two aspects of the cloud PaaS model are managed by the customer but not the provider? (Choose two)

  A. virtualization
  B. middleware
  C. operating systems
  D. applications
  E. data
  D. applications
  E. data

  ---

  Explanation

  Customers must manage applications and data in PaaS.

  

• Question 15:

  What is a language format designed to exchange threat intelligence that can be transported over the TAXII protocol?

  A. STIX
  B. XMPP
  C. pxGrid
  D. SMTP
  A. STIX

  ---

  Explanation

  STIX (Structured Threat Information eXpression) is a language format designed to exchange threat intelligence that can be transported over the TAXII (Trusted Automated eXchange of Indicator Information) protocol. STIX enables organizations to share cyber threat intelligence, such as information about malware, vulnerabilities, and indicators of compromise, in a structured and machine-readable format. It allows for the exchange of information about the cyber threats, including details on the threat actors, their tools, and tactics, techniques and procedures (TTPs).

• Question 16:

  What are two differences between a Cisco WSA that is running in transparent mode and one running in explicit mode? (Choose two)

  A. When the Cisco WSA is running in transparent mode, it uses the WSA's own IP address as the HTTP request destination.
  B. The Cisco WSA responds with its own IP address only if it is running in explicit mode.
  C. The Cisco WSA is configured in a web browser only if it is running in transparent mode.
  D. The Cisco WSA uses a Layer 3 device to redirect traffic only if it is running in transparent mode.
  E. The Cisco WSA responds with its own IP address only if it is running in transparent mode.
  B. The Cisco WSA responds with its own IP address only if it is running in explicit mode.
  D. The Cisco WSA uses a Layer 3 device to redirect traffic only if it is running in transparent mode.

  ---

  Explanation

  In explicit proxy mode, users are configured to use a web proxy and the web traffic is sent directly to the Cisco WSA. In contrast, in transparent proxy mode the Cisco WSA intercepts user's web traffic redirected from other network devices, such as switches, routers, or firewalls.

  The Cisco WSA responds with its own IP address only if it is running in explicit mode.

  This statement is true. In explicit mode, the client's browser is configured to send web traffic to the proxy server's IP address. Therefore, the WSA responds with its own IP address to the client's requests.

  The Cisco WSA uses a Layer 3 device to redirect traffic only if it is running in transparent mode.

  Option D is correct because in transparent mode, the WSA uses a Layer 3 device (such as a router) to redirect traffic to the proxy server, whereas in explicit mode, the client's browser is configured to send traffic directly to the WSA.

• Question 17:

  Which feature within Cisco ISE verifies the compliance of an endpoint before providing access to the network?

  A. Posture
  B. Profiling
  C. pxGrid
  D. MAB
  A. Posture

  ---

  Explanation

• Question 18:

  Refer to the exhibit. A network engineer must retrieve the interface configuration on a Cisco router by using the NETCONF API. The engineer uses a Python script to automate the activity. Which code snippet completes the script?

  

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B

  ---

  Explanation

• Question 19:

  Which license is required for Cisco Security Intelligence to work on the Cisco Next Generation Intrusion Prevention System?

  A. control
  B. malware
  C. URL filtering
  D. protect
  D. protect

  ---

  
  

• Question 20:

  What is the purpose of a denial-of-service attack?

  A. to disrupt the normal operation of a targeted system by overwhelming It
  B. to exploit a security vulnerability on a computer system to steal sensitive information
  C. to prevent or limit access to data on a computer system by encrypting It
  D. to spread throughout a computer system by self-replicating to additional hosts
  A. to disrupt the normal operation of a targeted system by overwhelming It

  ---

  Explanation

  The purpose of a Denial-of-Service (DoS) attack is to disrupt the normal operation of a targeted system, server, or network by overwhelming it with a flood of internet traffic. This is achieved by utilizing multiple compromised computer systems as sources of attack traffic. The overwhelming amount of traffic can cause the targeted system to slow down significantly or even crash and become unavailable to legitimate users, thereby denying service to intended users.