Cisco CCNP 350-701 Questions & Answers

• Question 11:

  Which MDM configuration provides scalability?

  A. pushing WPA2-Enterprise settings automatically to devices

  B. enabling use of device features such as camera use

  C. BYOD support without extra appliance or licenses

  D. automatic device classification with level 7 fingerprinting

  Correct Answer: C

• Question 12:

  Which Cisco platform processes behavior baselines, monitors for deviations, and reviews for malicious processes in data center traffic and servers while performing software vulnerability detection?

  A. Cisco Tetration

  B. Cisco ISE?

  C. Cisco AMP for Network

  D. Cisco AnyConnect

  Correct Answer: A

• Question 13:

  An engineer is configuring web filtering for a network using Cisco Umbrella Secure Internet Gateway.

  The requirement is that all traffic needs to be filtered. Using the SSL decryption feature, which type of certificate should be presented to the end-user to accomplish this goal?

  A. third-party

  B. self-signed

  C. organization owned root

  D. SubCA

  Correct Answer: C

• Question 14:

  Which security solution uses NetFlow to provide visibility across the network, data center, branch offices, and cloud?

  A. Cisco CTA

  B. Cisco Stealthwatch

  C. Cisco Encrypted Traffic Analytics

  D. Cisco Umbrella

  Correct Answer: B

• Question 15:

  An engineer has been tasked with configuring a Cisco FTD to analyze protocol fields and detect anomalies in the traffic from industrial systems. What must be done to meet these requirements?

  A. Implement pre-filter policies for the CIP preprocessor

  B. Enable traffic analysis in the Cisco FTD

  C. Configure intrusion rules for the DNP3 preprocessor

  D. Modify the access control policy to trust the industrial traffic

  Correct Answer: C

  Reference:

  https://www.cisco.com/c/en/us/td/docs/security/firepower/630/configuration/guide/fpmc- configguide-v63/scada_preprocessors.html

  Both DNP3 and CIP preprocessors can be used to detect traffic anomalies but we choose CIP as it is widely used in industrial applications.Note:+ An intrusion rule is a specified set of keywords and arguments that the system uses to detect

  attempts to exploit vulnerabilities in your network. As the system analyzes network traffic, it compares packets against the conditions specified in each rule, and triggers the rule if the data packet meets all the conditions specified in the rule. +

  Preprocessor rules, which are rules associated with preprocessors and packet decoder detection options in the network analysis policy. Most preprocessor rules are disabled by default.

• Question 16:

  Which portion of the network do EPP solutions solely focus on and EDR solutions do not?

  A. server farm

  B. perimeter

  C. core

  D. East-West gateways

  Correct Answer: B

• Question 17:

  A network engineer needs to select a VPN type that provides the most stringent security, multiple security associations for the connections, and efficient VPN establishment with the least bandwidth consumption. Why should the engineer select either FlexVPN or DMVPN for this environment?

  A. DMVPN because it supports IKEv2 and FlexVPN does not

  B. FlexVPN because it supports IKEv2 and DMVPN does not

  C. FlexVPN because it uses multiple SAs and DMVPN does not

  D. DMVPN because it uses multiple SAs and FlexVPN does not

  Correct Answer: C

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_ike2vpn/configuration/xe-16-12/sec-flex-vpn-xe-16-12-book/sec-cfg-flex-serv.html

• Question 18:

  Which Cisco DNA Center RESTful PNP API adds and claims a device into a workflow?

  A. api/v1/fie/config

  B. api/v1/onboarding/pnp-device/import

  C. api/v1/onboarding/pnp-device

  D. api/v1/onboarding/workflow

  Correct Answer: B

• Question 19:

  

  Refer to the exhibit. What function does the API key perform while working with https://api.amp.cisco.com/v1/computers?

  A. imports requests

  B. HTTP authorization

  C. HTTP authentication

  D. plays dent ID

  Correct Answer: C

  https://www.cisco.com/c/en/us/support/docs/security/amp-endpoints/201121-Overview-of-the-Cisco-AMP-for-Endpoints.html

• Question 20:

  What limits communication between applications or containers on the same node?

  A. microsegmentation

  B. container orchestration

  C. microservicing

  D. Software-Defined Access

  Correct Answer: A