Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 221:

  Which solution operates as a cloud-native CASB?

  A. Cisco Stealthwatch Cloud
  B. Cisco Umbrella
  C. Cisco pxGrid
  D. Cisco CloudLock
  D. Cisco CloudLock

  ---

  Explanation

• Question 222:

  An engineer is configuring IPsec VPN and needs an authentication protocol that is reliable and supports ACK and sequence. Which protocol accomplishes this goal?

  A. AES-192
  B. IKEv1
  C. AES-256
  D. ESP
  D. ESP

  ---

  Explanation

• Question 223:

  In which cloud services model is the tenant responsible for virtual machine OS patching?

  A. IaaS
  B. UCaaS
  C. PaaS
  D. SaaS
  A. IaaS

  ---

  Explanation

  Only in On-site (on-premises) and IaaS we (tenant) manage O/S (Operating System).

  

• Question 224:

  An engineer has enabled LDAP accept queries on a listener. Malicious actors must be prevented from quickly identifying all valid recipients. What must be done on the Cisco ESA to accomplish this goal?

  A. Configure incoming content filters
  B. Use Bounce Verification
  C. Configure Directory Harvest Attack Prevention
  D. Bypass LDAP access queries in the recipient access table
  C. Configure Directory Harvest Attack Prevention

  ---

  Explanation

  A Directory Harvest Attack (DHA) is a technique used by spammers to find valid/existent email addresses at a domain either by using Brute force or by guessing valid e-mail addresses at a domain using differentpermutations of common username. Its easy for attackers to get hold of a valid email address if yourorganization uses standard format for official e-mail alias (for example:

  [email protected]). We canconfigure DHA Prevention to prevent malicious actors from quickly identifying valid recipients.Note: Lightweight Directory Access Protocol (LDAP) is an Internet protocol that email programs use to look up contact information from a server, such as ClickMail Central Directory. For example, here's an LDAP search translated into plain English: "Search for all people located in Chicago who's name contains "Fred" that have an email address.

  Please return their full name, email, title, and description.

• Question 225:

  An engineer needs behavioral analysis to detect malicious activity on the hosts, and is configuring the organization's public cloud to send telemetry using the cloud provider's mechanisms to a security device. Which mechanism should the engineer configure to accomplish this goal?

  A. mirror port
  B. sFlow
  C. NetFlow
  D. VPC flow logs
  D. VPC flow logs

  ---

  Explanation

  https://aws.amazon.com/marketplace/pp/prodview-woiawecmdlezq

• Question 226:

  Which policy is used to capture host information on the Cisco Firepower Next Generation Intrusion Prevention System?

  A. Correlation
  B. Intrusion
  C. Access Control
  D. Network Discovery
  D. Network Discovery

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-configguide-v64/introduction_to_network_discovery_and_identity.html

• Question 227:

  Which Cisco AMP feature allows an engineer to look back to trace past activities, such as file and process activity on an endpoint?

  A. endpoint isolation
  B. advanced search
  C. advanced investigation
  D. retrospective security
  D. retrospective security

  ---

  Explanation

• Question 228:

  Which Cisco Firewall solution requires zone definition?

  A. CBAC
  B. Cisco AMP
  C. ZBFW
  D. Cisco ASA
  C. ZBFW

  ---

  Explanation

• Question 229:

  Which two capabilities does an MDM provide? (Choose two.)

  A. delivery of network malware reports to an inbox in a schedule
  B. unified management of mobile devices, Macs, and PCs from a centralized dashboard
  C. enforcement of device security policies from a centralized dashboard
  D. manual identification and classification of client devices
  E. unified management of Android and Apple devices from a centralized dashboard
  B. unified management of mobile devices, Macs, and PCs from a centralized dashboard
  C. enforcement of device security policies from a centralized dashboard

  ---

  Explanation

• Question 230:

  A network administrator received a critical message alert from a Cisco Secure Web Appliance stating that the log partition is at 107% capacity. How does a Cisco Secure Web Appliance respond when its logging partition is full?

  A. It overwrites the oldest log files.
  B. It suspends logging and reporting functions.
  C. It deletes logs older than a configurable age.
  D. It archives older logs in a compressed file to free space.
  B. It suspends logging and reporting functions.

  ---

  Explanation