Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 311:

  What are two benefits of workload security? (Choose two.)

  A. Tracked application security
  B. Automated patching
  C. Reduced attack surface
  D. Scalable security policies
  E. Workload modeling
  C. Reduced attack surface
  D. Scalable security policies

  ---

  Explanation

• Question 312:

  How does a Cisco Secure Firewall help to lower the risk of exfiltration techniques that steal customer data?

  A. blocking UDP port 53
  B. blocking TCP port 53
  C. inspecting the DNS traffic
  D. encrypting the DNS communication
  C. inspecting the DNS traffic

  ---

  Explanation

• Question 313:

  Which cloud model is a collaborative effort where infrastructure is shared and jointly accessed by several organizations from a specific group?

  A. Hybrid
  B. Community
  C. Private
  D. Public
  B. Community

  ---

  Explanation

  Community Cloud allows system and services to be accessible by group of organizations. It shares theinfrastructure between several organizations from a specific community. It may be managed internally byorganizations or by the third-party.

• Question 314:

  Which capability is provided by application visibility and control?

  A. reputation filtering
  B. data obfuscation
  C. data encryption
  D. deep packet inspection
  D. deep packet inspection

  ---

  Explanation

• Question 315:

  A network administrator is using the Cisco ESA with AMP to upload files to the cloud for analysis. The network is congested and is affecting communication. How will the Cisco ESA handle any files which need analysis?

  A. AMP calculates the SHA-256 fingerprint, caches it, and periodically attempts the upload.
  B. The file is queued for upload when connectivity is restored.
  C. The file upload is abandoned.
  D. The ESA immediately makes another attempt to upload the file.
  C. The file upload is abandoned.

  ---

  Explanation

  https://www.cisco.com/c/en/us/support/docs/security/email-security- appliance/118796-technoteesa-00.html

  In this question, it stated "the network is congested" (not the file analysis server was overloaded) so theappliance will not try to upload the file again.

• Question 316:

  Which two functions does the Cisco Advanced Phishing Protection solution perform in trying to protect from phishing attacks? (Choose two.)

  A. blocks malicious websites and adds them to a block list
  B. does a real-time user web browsing behavior analysis
  C. provides a defense for on-premises email deployments
  D. uses a static algorithm to determine malicious
  E. determines if the email messages are malicious
  C. provides a defense for on-premises email deployments
  E. determines if the email messages are malicious

  ---

  Explanation

• Question 317:

  Refer to the exhibit. When creating an access rule for URL filtering, a network engineer adds certain categories and individual URLs to block. What is the result of the configuration?

  A. Only URLs for botnets with reputation scores of 1-3 will be blocked.
  B. Only URLs for botnets with a reputation score of 3 will be blocked.
  C. Only URLs for botnets with reputation scores of 3-5 will be blocked.
  D. Only URLs for botnets with a reputation score of 3 will be allowed while the rest will be blocked.
  A. Only URLs for botnets with reputation scores of 1-3 will be blocked.

  ---

  Explanation

• Question 318:

  An engineer recently completed the system setup on a Cisco WSA. Which URL information does the system send to SensorBase Network servers?

  A. Summarized server-name information and MD5-hashed path information
  B. complete URL,without obfuscating the path segments
  C. URL information collected from clients that connect to the Cisco WSA using Cisco AnyConnect
  D. none because SensorBase Network Participation is disabled by default
  B. complete URL,without obfuscating the path segments

  ---

  Explanation

• Question 319:

  Which Cisco product is open, scalable, and built on IETF standards to allow multiple security products from Cisco and other vendors to share data and interoperate with each other?

  A. Advanced Malware Protection
  B. Platform Exchange Grid
  C. Multifactor Platform Integration
  D. Firepower Threat Defense
  B. Platform Exchange Grid

  ---

  Explanation

  With Cisco pxGrid (Platform Exchange Grid), your multiple security products can now share data and work together. This open, scalable, and IETF standards-driven platform helps you automate security to get answers and contain threats faster.

• Question 320:

  An organization is moving toward the zero-trust model. Which Cisco solution enables administrators to deploy and control microsegmentation of endpoints that are connected to a Cisco Data Center Virtual Edge, Cisco Application Virtual Switch, Microsoft vSwitch, and VMware vSphere Distributed Switch?

  A. Cisco Titration
  B. Cisco DCNM
  C. Cisco Stealthwatch
  D. Cisco ACI
  D. Cisco ACI

  ---

  Explanation