Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 241:

  Which API technology with SDN architecture is used to communicate with a controller and network devices such as routers and switches?

  A. rest APIs
  B. northbound APIs
  C. southbound APIs
  D. unprotected APIs
  C. southbound APIs

  ---

  Explanation

• Question 242:

  An engineer is implementing DHCP security mechanisms and needs the ability to add additional attributes to profiles that are created within Cisco ISE.

  Which action accomplishes this task?

  A. Define MAC-to-lP address mappings in the switch to ensure that rogue devices cannot get an IP address
  B. Use DHCP option 82 to ensure that the request is from a legitimate endpoint and send the information to Cisco ISE
  C. Modify the DHCP relay and point the IP address to Cisco ISE.
  D. Configure DHCP snooping on the switch VLANs and trust the necessary interfaces
  C. Modify the DHCP relay and point the IP address to Cisco ISE.

  ---

  Explanation

• Question 243:

  DRAG DROP

  An engineer must enable Outbreak Filters globally on an AsyncOS for Cisco Secure Email Gateway to protect the network from large-scale malware attacks. Drag and drop the steps from the left into the sequence on the right to complete the configuration.

  Select and Place:

  

  

• Question 244:

  What is a difference between GRE over IPsec and IPsec with crypto map?

  A. Multicast traffic is supported by IPsec with crypto map.
  B. GRE over IPsec supports non-IP protocols.
  C. GRE provides its own encryption mechanism.
  D. IPsec with crypto map oilers better scalability.
  B. GRE over IPsec supports non-IP protocols.

  ---

  Explanation

  The difference between GRE over IPsec and IPsec with crypto map is that GRE (Generic Routing Encapsulation) over IPsec can encapsulate and transport non-IP protocols across an IP network, whereas IPsec with crypto map is typically used for IP traffic. GRE tunnels wrapped in IPsec provide a way to transport multicast traffic and other protocol types across an IPsec VPN, offering greater flexibility in the types of traffic that can be secured.

• Question 245:

  DRAG DROP

  Drag and drop the descriptions from the left onto the encryption algorithms on the right.

  Select and Place:

  

  

• Question 246:

  What is a benefit of using Cisco CWS compared to an on-premises Cisco WSA?

  A. Cisco CWS eliminates the need to backhaul traffic through headquarters for remote workers whereas Cisco WSA does not
  B. Cisco CWS minimizes the load on the internal network and security infrastructure as compared to Cisco WSA.
  C. URL categories are updated more frequently on Cisco CWS than they are on Cisco WSA
  D. Content scanning for SAAS cloud applications is available through Cisco CWS and not available through Cisco WSA
  A. Cisco CWS eliminates the need to backhaul traffic through headquarters for remote workers whereas Cisco WSA does not

  ---

  Explanation

• Question 247:

  What is capability of EPP compared to EDR?

  A. EPP protects against malware that has already entered the environment, and EDR focuses on protecting against botnets.
  B. EDR protects against email attacks, and EPP focuses on detecting and monitoring phishing and ransomware email attacks.
  C. EDR protects against malicious email attacks, and EPP focuses on suspicious website attacks including DoS and DDoS attempts.
  D. EDR protects against malware that has already entered the environment, and EPP focuses on preventing malware from entering.
  D. EDR protects against malware that has already entered the environment, and EPP focuses on preventing malware from entering.

  ---

  Explanation

• Question 248:

  Which product allows Cisco FMC to push security intelligence observable to its sensors from other products?

  A. Encrypted Traffic Analytics
  B. Threat Intelligence Director
  C. Cognitive Threat Analytics
  D. Cisco Talos Intelligence
  B. Threat Intelligence Director

  ---

  Explanation

  Cisco FMC's Threat Intelligence Director allows security teams to integrate security intelligence observables from various sources, such as Cisco Talos, into their Cisco FMC environment. This allows the FMC to push updated security intelligence to its sensors, enabling them to better detect and respond to potential threats.

• Question 249:

  Which information is required when adding a device to Firepower Management Center?

  A. username and password
  B. encryption method
  C. device serial number
  D. registration key
  D. registration key

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Device_Management_Basics.html

• Question 250:

  

  Refer to the exhibit. What is the result of the Python script?

  A. It uses the POST HTTP method to obtain a username and password to be used for authentication.
  B. It uses the POST HTTP method to obtain a token to be used for authentication.
  C. It uses the GET HTTP method to obtain a token to be used for authentication.
  D. It uses the GET HTTP method to obtain a username and password to be used for authentication
  B. It uses the POST HTTP method to obtain a token to be used for authentication.

  ---

  Explanation