Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 301:

  Which Cisco platform onboards the endpoint and can issue a CA signed certificate while also automatically configuring endpoint network settings to use the signed endpoint certificate, allowing the endpoint to gain network access?

  A. Cisco ISE
  B. Cisco NAC
  C. Cisco TACACS+
  D. Cisco WSA
  A. Cisco ISE

  ---

  Explanation

• Question 302:

  An engineer must implement a file transfer solution between a company's data center and branches. The company has numerous servers hosted in a hybrid cloud implementation. The file transfer protocol must support authentication, protect the data against unauthorized access, and ensure that users cannot list directories or remove files remotely. Which protocol must be used?

  A. SCP
  B. SSH
  C. FTPS
  D. SFTP
  A. SCP

  ---

  Explanation

• Question 303:

  After a recent breach, an organization determined that phishing was used to gain initial access to the network before regaining persistence. The information gained from the phishing attack was a result of users visiting known malicious websites. What must be done in order to prevent this from happening in the future?

  A. Modify an access policy
  B. Modify identification profiles
  C. Modify outbound malware scanning policies
  D. Modify web proxy settings
  D. Modify web proxy settings

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc- config-guidev60/Access_Control_Rules__URL_Filtering.html

• Question 304:

  Which cloud service model offers an environment for cloud consumers to develop and deploy applications without needing to manage or maintain the underlying cloud infrastructure?

  A. PaaS
  B. XaaS
  C. IaaS
  D. SaaS
  A. PaaS

  ---

  Explanation

  CCNP and CCIE Security Core SCOR 350-701 Official Cert Guide

• Question 305:

  Which two key and block sizes are valid for AES? (Choose two)

  A. 64-bit block size, 112-bit key length
  B. 64-bit block size, 168-bit key length
  C. 128-bit block size, 192-bit key length
  D. 128-bit block size, 256-bit key length
  E. 192-bit block size, 256-bit key length
  C. 128-bit block size, 192-bit key length
  D. 128-bit block size, 256-bit key length

  ---

  Explanation

  The AES encryption algorithm encrypts and decrypts data in blocks of 128 bits (block size). It can do this using 128-bit, 192-bit, or 256-bit keys

• Question 306:

  DRAG DROP

  Drag and drop the threats from the left onto examples of that threat on the right.

  Select and Place:

  

  

• Question 307:

  Which system performs compliance checks and remote wiping?

  A. MDM
  B. ISE
  C. AMP
  D. OTP
  A. MDM

  ---

  Explanation

• Question 308:

  What is a benefit of using GET VPN over FlexVPN within a VPN deployment?

  A. GET VPN supports Remote Access VPNs
  B. GET VPN natively supports MPLS and private IP networks
  C. GET VPN uses multiple security associations for connections
  D. GET VPN interoperates with non-Cisco devices
  B. GET VPN natively supports MPLS and private IP networks

  ---

  Explanation

• Question 309:

  Which role is a default guest type in Cisco ISE?

  A. Monthly
  B. Yearly
  C. Contractor
  D. Full-Time
  C. Contractor

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/security/ise/1-4- 1/admin_guide/b_ise_admin_guide_141/b_ise_admin_guide_141_chapter_01110.html

• Question 310:

  Which action configures the iEEE 802.1X Flexible Authentication feature to support Layer 3 authentication mechanisms?

  A. Modify the Dot1x configuration on the VPN server to send Layer 3 authentications to an external authentication database.
  B. Identify the devices using this feature and create a policy that allows them to pass Layer 2 authentication.
  C. Add MAB into the switch to allow redirection to a Layer 3 device for authentication.
  D. Configure WebAuth so the hosts are redirected to a web page for authentication.
  D. Configure WebAuth so the hosts are redirected to a web page for authentication.

  ---

  Explanation