Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 231:

  What is a benefit of a Cisco Secure Email Gateway Virtual as compared to a physical Secure Email Gateway?

  A. simplifies the distribution of software updates
  B. provides faster performance
  C. provides an automated setup process
  D. enables the allocation of additional resources
  D. enables the allocation of additional resources

  ---

  Explanation

  One of the benefits of a Cisco Secure Email Gateway Virtual appliance compared to a physical one is the ability to allocate additional resources as needed. Virtual appliances can be easily scaled up by allocating more CPU, memory, or storage resources, providing flexibility and scalability in response to changing demands or growth.

• Question 232:

  With which components does a southbound API within a software-defined network architecture communicate?

  A. controllers within the network
  B. applications
  C. appliances
  D. devices such as routers and switches
  D. devices such as routers and switches

  ---

  Explanation

  

  The Southbound API is used to communicate between Controllers and network devices.

• Question 233:

  What is a difference between an EPP solution and an EDR solution?

  A. EPP detects malicious activity on endpoints, and EDR only detects file-based malware on endpoints.
  B. EDR provides endpoint data loss prevention, and EPP remediates hosts to a preinfection state.
  C. EDR focuses on detecting network-level threats, and EPP focuses on detecting host-level threats.
  D. EPP contains a security incident at the network traffic level, and EDR contains a security incident at the endpoint.
  D. EPP contains a security incident at the network traffic level, and EDR contains a security incident at the endpoint.

  ---

  Explanation

• Question 234:

  Which RADIUS attribute can you use to filter MAB requests in an 802.1 x deployment?

  A. 1
  B. 2
  C. 6
  D. 31
  C. 6

  ---

  Explanation

  https://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/identity- based-networkingservices/config_guide_c17-663759.html

• Question 235:

  Which standard is used to automate exchanging cyber threat information?

  A. TAXII
  B. MITRE
  C. IoC
  D. STIX
  A. TAXII

  ---

  Explanation

• Question 236:

  Which Cisco security solution protects remote users against phishing attacks when they are not connected to the VPN?

  A. Cisco Stealthwatch
  B. Cisco Umbrella
  C. Cisco Firepower
  D. NGIPS
  B. Cisco Umbrella

  ---

  Explanation

  Cisco Umbrella protects users from accessing malicious domains by proactively analyzing and blocking unsafe destinations ?before a connection is ever made. Thus it can protect from phishing attacks by blocking suspicious domains when users click on the given links that an attacker sent. Cisco Umbrella roaming protects your employees even when they are off the VPN.

• Question 237:

  A network engineer has been tasked with adding a new medical device to the network. Cisco ISE is being used as the NAC server, and the new device does not have a supplicant available. What must be done in order to securely connect this device to the network?

  A. Use MAB with profiling
  B. Use MAB with posture assessment.
  C. Use 802.1X with posture assessment.
  D. Use 802.1X with profiling.
  A. Use MAB with profiling

  ---

  Explanation

  https://community.cisco.com/t5/security-documents/ise-profiling-design- guide/ta-p/3739456

• Question 238:

  An organization wants to provide visibility and to identify active threats in its network using a VM. The organization wants to extract metadata from network packet flow while ensuring that payloads are not retained or transferred outside the network. Which solution meets these requirements?

  A. Cisco Umbrella Cloud
  B. Cisco Stealthwatch Cloud PNM
  C. Cisco Stealthwatch Cloud PCM
  D. Cisco Umbrella On-Premises
  B. Cisco Stealthwatch Cloud PNM

  ---

  Explanation

  https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2019/pdf/5eU6DfQV/LTRSEC-2240- LG2.pdf

• Question 239:

  Refer to the exhibit.

  

  Which command was used to generate this output and to show which ports are authenticating with dot1x or mab?

  A. show authentication registrations
  B. show authentication method
  C. show dot1x all
  D. show authentication sessions
  D. show authentication sessions

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/s1/sec-s1-xe-3se- 3850-cr-book/sec-s1-xe-3se-3850-cr-book_chapter_01.html#wp3404908137 Displaying the Summary of All Auth Manager Sessions on the Switch Enter the following:

  Switch# show authentication sessions

  Interface MAC Address Method Domain Status Session ID Gi1/48 0015.63b0.f676 dot1x DATA Authz Success 0A3462B1000000102983C05C Gi1/5 000f.23c4.a401 mab DATA Authz Success 0A3462B10000000D24F80B58 Gi1/5 0014.bf5d.d26d dot1x DATA Authz Success 0A3462B10000000E29811B94

• Question 240:

  A network administrator is configuring a role in an access control policy to block certain URLs and selects the "Chat and instant Messaging" category. Which reputation score should be selected to accomplish this goal?

  A. 3
  B. 5
  C. 10
  D. 1
  C. 10

  ---

  Explanation