Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 291:

  An organization has DHCP servers set up to allocate IP addresses to clients on the LAN.

  What must be done to ensure the LAN switches prevent malicious DHCP traffic while also distributing IP addresses to the correct endpoints?

  A. Configure Dynamic ARP Inspection and add entries in the DHCP snooping database
  B. Configure DHCP snooping and set an untrusted interface for all clients
  C. Configure Dynamic ARP Inspection and antispoofing ACLs in the DHCP snooping database
  D. Configure DHCP snooping and set a trusted interface for the DHCP server
  D. Configure DHCP snooping and set a trusted interface for the DHCP server

  ---

  Explanation

• Question 292:

  An engineer must force an endpoint to re-authenticate an already authenticated session without disrupting the endpoint to apply a new or updated policy from ISE. Which CoA type achieves this goal?

  A. Port Bounce
  B. CoA Terminate
  C. CoA Reauth
  D. CoA Session Query
  C. CoA Reauth

  ---

  Explanation

• Question 293:

  An organization has a requirement to collect full metadata information about the traffic going through their AWS cloud services They want to use this information for behavior analytics and statistics. Which two actions must be taken to implement this requirement? (Choose two.)

  A. Configure Cisco ACI to ingest AWS information.
  B. Configure Cisco Thousand Eyes to ingest AWS information.
  C. Send syslog from AWS to Cisco Stealthwatch Cloud.
  D. Send VPC Flow Logs to Cisco Stealthwatch Cloud.
  E. Configure Cisco Stealthwatch Cloud to ingest AWS information
  D. Send VPC Flow Logs to Cisco Stealthwatch Cloud.
  E. Configure Cisco Stealthwatch Cloud to ingest AWS information

  ---

  Explanation

  https://www.cisco.com/c/dam/en/us/td/docs/security/stealthwatch/cloud/configuration/Public_Cloud_Monitoring_for_AWS_Quick_Start_Guide_DV_2_0.pdf

• Question 294:

  Which two kinds of attacks are prevented by multifactor authentication? (Choose two)

  A. phishing
  B. brute force
  C. man-in-the-middle
  D. DDOS
  E. teardrop
  A. phishing
  B. brute force

  ---

  Explanation

  https://www.cisco.com/c/dam/en_us/about/doing_business/trust-center/docs/cisco-mfa-password-security-infographic.pdf

• Question 295:

  An organization is using CSR1000v routers in their private cloud infrastructure. They must upgrade their code to address vulnerabilities within their running code version. Who is responsible for these upgrades?

  A. The organization must update the code for the devices they manage.
  B. The cloud vendor is responsible for updating all code hosted in the cloud.
  C. The cloud service provider must be asked to perform the upgrade.
  D. The CSR1000v is upgraded automatically as new code becomes available.
  A. The organization must update the code for the devices they manage.

  ---

  Explanation

• Question 296:

  DRAG DROP

  Drag and drop the capabilities of Cisco Firepower versus Cisco AMP from the left into the appropriate category on the right.

  Select and Place:

  

  

• Question 297:

  Which risk is created when using an Internet browser to access cloud-based service?

  A. misconfiguration of infrastructure, which allows unauthorized access
  B. intermittent connection to the cloud connectors
  C. vulnerabilities within protocol
  D. insecure implementation of API
  C. vulnerabilities within protocol

  ---

  Explanation

  Using an Internet browser to access cloud-based services introduces vulnerabilities within protocols, such as HTTPS, TLS, or browser-side scripting (e.g., JavaScript). These protocols, while generally secure, can be exploited if not properly implemented or patched, potentially exposing user sessions or sensitive data to attackers through methods like man-in-the-middle attacks or cross-site scripting (XSS).

• Question 298:

  How does Cisco Umbrella archive logs to an enterprise owned storage?

  A. by using the Application Programming Interface to fetch the logs
  B. by sending logs via syslog to an on-premises or cloud-based syslog server
  C. by the system administrator downloading the logs from the Cisco Umbrella web portal
  D. by being configured to send logs to a self-managed AWS S3 bucket
  D. by being configured to send logs to a self-managed AWS S3 bucket

  ---

  Explanation

  https://docs.umbrella.com/deployment-umbrella/docs/log-management

• Question 299:

  Why is it important to have logical security controls on endpoints even though the users are trained to spot security threats and the network devices already help prevent them?

  A. to prevent theft of the endpoints
  B. because defense-in-depth stops at the network
  C. to expose the endpoint to more threats
  D. because human error or insider threats will still exist
  D. because human error or insider threats will still exist

  ---

  Explanation

• Question 300:

  Which function is the primary function of Cisco AMP threat Grid?

  A. automated email encryption
  B. applying a real-time URI blacklist
  C. automated malware analysis
  D. monitoring network traffic
  C. automated malware analysis

  ---

  Explanation