Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 211:

  What is a key difference between Cisco Firepower and Cisco ASA?

  A. Cisco ASA provides access control while Cisco Firepower does not.
  B. Cisco Firepower provides identity-based access control while Cisco ASA does not.
  C. Cisco Firepower natively provides intrusion prevention capabilities while Cisco ASA does not.
  D. Cisco ASA provides SSL inspection while Cisco Firepower does not.
  C. Cisco Firepower natively provides intrusion prevention capabilities while Cisco ASA does not.

  ---

  Explanation

• Question 212:

  An engineer needs a solution for TACACS+ authentication and authorization for device administration.

  The engineer also wants to enhance wired and wireless network security by requiring users and endpoints to use 802.1X, MAB, or WebAuth. Which product meets all of these requirements?

  A. Cisco Prime Infrastructure
  B. Cisco Identity Services Engine
  C. Cisco Stealthwatch
  D. Cisco AMP for Endpoints
  B. Cisco Identity Services Engine

  ---

  Explanation

• Question 213:

  Which feature enables a Cisco ISR to use the default bypass list automatically for web filtering?

  A. filters
  B. group key
  C. company key
  D. connector
  D. connector

  ---

  Explanation

• Question 214:

  What is a benefit of conducting device compliance checks?

  A. It indicates what type of operating system is connecting to the network.
  B. It validates if anti-virus software is installed.
  C. It scans endpoints to determine if malicious activity is taking place.
  D. It detects email phishing attacks.
  B. It validates if anti-virus software is installed.

  ---

  Explanation

• Question 215:

  A Cisco AMP for Endpoints administrator configures a custom detection policy to add specific MD5 signatures The configuration is created in the simple detection policy section, but it does not work. What is the reason for this failure?

  A. The administrator must upload the file instead of the hash for Cisco AMP to use.
  B. The MD5 hash uploaded to the simple detection policy is in the incorrect format
  C. The APK must be uploaded for the application that the detection is intended
  D. Detections for MD5 signatures must be configured in the advanced custom detection policies
  D. Detections for MD5 signatures must be configured in the advanced custom detection policies

  ---

  Explanation

• Question 216:

  What features does Cisco FTDv provide over Cisco ASAv?

  A. Cisco FTDv runs on VMWare while ASAv does not
  B. Cisco FTDv provides 1GB of firewall throughput while Cisco ASAv does not
  C. Cisco FTDv runs on AWS while ASAv does not
  D. Cisco FTDv supports URL filtering while ASAv does not
  D. Cisco FTDv supports URL filtering while ASAv does not

  ---

  Explanation

• Question 217:

  Which API method and required attribute are used to add a device into Cisco DNA Center with the native API?

  A. lastSyncTime and pid
  B. POST and name
  C. userSudiSerialNos and devicelnfo
  D. GET and serialNumber
  B. POST and name

  ---

  Explanation

  To add a device into Cisco DNA Center with the native API, the API method used is POST which creates a new resource. One of the required attribute to add a device is the "name" attribute, which is used to specify the name of the device being added. The device name should be unique and it's used to identify the device within the Cisco DNA Center platform.

  A GET request is used to retrieve information from a resource. "SerialNumber" and "userSudiSerialNos" are attributes used to identify a device but they are not required to add a device into Cisco DNA Center, they are needed to retrieve a specific device information. "lastSyncTime" is an attribute used to indicate when the device last synced with Cisco DNA Center, it's not required to add a device. "pid" is an attribute used to identify a device's product ID, and it's not required to add a device.

• Question 218:

  An organization is using Cisco Firepower and Cisco Meraki MX for network security and needs to centrally manage cloud policies across these platforms. Which software should be used to accomplish this goal?

  A. Cisco Defense Orchestrator
  B. Cisco Secureworks
  C. Cisco DNA Center
  D. Cisco Configuration Professional
  A. Cisco Defense Orchestrator

  ---

  Explanation

  https://www.cisco.com/c/en/us/products/collateral/security/defense- orchestrator/datasheet-c78-736847.html

• Question 219:

  With regard to RFC 5176 compliance, how many IETF attributes are supported by the RADIUS CoA feature?

  A. 3
  B. 5
  C. 10
  D. 12
  B. 5

  ---

  Explanation

• Question 220:

  What does Cisco AMP for Endpoints use to help an organization detect different families of malware?

  A. Ethos Engine to perform fuzzy fingerprinting
  B. Tetra Engine to detect malware when me endpoint is connected to the cloud
  C. Clam AV Engine to perform email scanning
  D. Spero Engine with machine learning to perform dynamic analysis
  A. Ethos Engine to perform fuzzy fingerprinting

  ---

  Explanation

  https://docs.amp.cisco.com/AMP%20for%20Endpoints%20User%20Guide.pdfETHOS = Fuzzy Fingerprinting using static/passive heuristics https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2016/pdf/BRKSEC- 2139.pdf