Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 341:

  What is the function of SDN southbound API protocols?

  A. to allow for the dynamic configuration of control plane applications
  B. to enable the controller to make changes
  C. to enable the controller to use REST
  D. to allow for the static configuration of control plane applications
  B. to enable the controller to make changes

  ---

  Explanation

  https://www.ciscopress.com/articles/article.asp?p=3004581andseqNum=2

  Note: Southbound APIs helps us communicate with data plane (not control plane) applications

• Question 342:

  Which solution should a network administrator deploy to protect a webserver from SQL injection attacks?

  A. IDS
  B. Secure Web Appliance
  C. ISE
  D. IPS
  B. Secure Web Appliance

  ---

  Explanation

• Question 343:

  A security test performed on one of the applications shows that user input is not validated. Which security vulnerability is the application more susceptible to because of this lack of validation?

  A. denial -of-service
  B. cross-site request forgery
  C. man-in-the-middle
  D. SQL injection
  D. SQL injection

  ---

  Explanation

  An application that does not validate user input is particularly susceptible to SQL injection attacks. In an SQL injection attack, an attacker can insert or "inject" a SQL query via the input data from the client to the application. Due to the lack of validation, the malicious SQL commands are executed by the database server, leading to unauthorized access or manipulation of the database.

• Question 344:

  An organization has a Cisco Stealthwatch Cloud deployment in their environment. Cloud logging is working as expected, but logs are not being received from the on-premise network, what action will resolve this issue?

  A. Configure security appliances to send syslogs to Cisco Stealthwatch Cloud
  B. Configure security appliances to send NetFlow to Cisco Stealthwatch Cloud
  C. Deploy a Cisco FTD sensor to send events to Cisco Stealthwatch Cloud
  D. Deploy a Cisco Stealthwatch Cloud sensor on the network to send data to Cisco Stealthwatch Cloud
  D. Deploy a Cisco Stealthwatch Cloud sensor on the network to send data to Cisco Stealthwatch Cloud

  ---

  Explanation

  CCNP And CCIE Security Core SCOR 350-701 Official Cert Guide

• Question 345:

  Which term describes when the Cisco Firepower downloads threat intelligence updates from Cisco Talos?

  A. consumption
  B. sharing
  C. analysis
  D. authoring
  A. consumption

  ---

  Explanation

  we will showcase Cisco Threat Intelligence Director (CTID) an exciting feature on Cisco's FirepowerManagement Center (FMC) product offering that automates the operationalization of threat intelligence. TID has the ability to consume threat intelligence via STIX over TAXII and allows uploads/downloads of STIX and simple blacklists. Reference: https://blogs.cisco.com/developer/automate-threat- intelligence-using-cisco-threat-intelligencedirector

• Question 346:

  Elliptic curve cryptography is a stronger more efficient cryptography method meant to replace which current encryption technology?

  A. 3DES
  B. RSA
  C. DES
  D. AES
  B. RSA

  ---

  Explanation

  Compared to RSA, the prevalent public-key cryptography of the Internet today, Elliptic Curve Cryptography (ECC) offers smaller key sizes, faster computation,as well as memory, energy and bandwidth savings and is thus better suited forsmall devices.

• Question 347:

  Which open standard creates a framework for sharing threat intelligence in a machine-digestible format?

  A. OpenC2
  B. OpenlOC
  C. CybOX
  D. STIX
  B. OpenlOC

  ---

  Explanation

• Question 348:

  DRAG DROP

  Drag and drop the cloud security assessment components from the left onto the definitions on the right.

  Select and Place:

  

  

• Question 349:

  Refer to the exhibit.

  

  An administrator is configuring a VPN tunnel on a Cisco router. The information provided by the administrator of the remote end of the VPN tunnel was that IKEv1 is the tunnel protocol with a preshared key of C1$c0463835440!. The encryption for both phases is AES and the hash for both phases is SHA-256. The source subnet is 10.10.10.x/24 and the destination subnet is 10.10.20.x/24. The local device cannot establish a VPN tunnel and the debug message shown here is seen in the log file. What must be verified to correct the configuration?

  A. Ensure that the IKE version is identical on both ends
  B. Ensure that the ISAKMP policy configuration is identical on both ends
  C. Ensure that the preshared key is identical on both ends
  D. Ensure that the ACLs that define interesting traffic are symmetrical on both ends
  C. Ensure that the preshared key is identical on both ends

  ---

  Explanation

• Question 350:

  Which parameter is required when configuring a Netflow exporter on a Cisco Router?

  A. DSCP value
  B. Source interface
  C. Exporter name
  D. Exporter description
  C. Exporter name

  ---

  Explanation

  An example of configuring a NetFlow exporter is shown below:flow exporter Exporterdestination 192.168.100.22transport udp 2055