Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 351:

  In which two ways does Easy Connect help control network access when used with Cisco TrustSec? (Choose two)

  A. It allows multiple security products to share information and work together to enhance security posture in the network.
  B. It creates a dashboard in Cisco ISE that provides full visibility of all connected endpoints.
  C. It allows for the assignment of Security Group Tags and does not require 802.1x to be configured on the switch or the endpoint.
  D. It integrates with third-party products to provide better visibility throughout the network.
  E. It allows for managed endpoints that authenticate to AD to be mapped to Security Groups (PassiveID).
  C. It allows for the assignment of Security Group Tags and does not require 802.1x to be configured on the switch or the endpoint.
  E. It allows for managed endpoints that authenticate to AD to be mapped to Security Groups (PassiveID).

  ---

  Explanation

  https://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise- networks/trustsec/trustsec-witheasy-connect-configuration-guide.pdf

• Question 352:

  Which Cisco ASA Platform mode disables the threat detection features except for Advanced Threat Statistics?

  A. cluster
  B. transparent
  C. routed
  D. multiple context
  D. multiple context

  ---

  Explanation

• Question 353:

  Which benefit does DMVPN provide over GETVPN?

  A. DMVPN supports QoS, multicast, and routing, and GETVPN supports only QoS.
  B. DMVPN is a tunnel-less VPN, and GETVPN is tunnel-based.
  C. DMVPN supports non-IP protocols, and GETVPN supports only IP protocols.
  D. DMVPN can be used over the public Internet, and GETVPN requires a private network.
  D. DMVPN can be used over the public Internet, and GETVPN requires a private network.

  ---

  Explanation

• Question 354:

  Which posture assessment requirement provides options to the client for remediation and requires the remediation within a certain timeframe?

  A. Audit
  B. Mandatory
  C. Optional
  D. Visibility
  B. Mandatory

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/security/ise/2- 4/admin_guide/b_ISE_admin_guide_24/m_client_posture_policies.html#:~:text=Policy%20 Requirement%20Types- ,Mandatory%20Requirements,the%20requirements%20within%20the% 20time%20specifie d%20in%20the%20remediation%20timer%20settings.,-For%20example%2C%20you

  Mandatory Requirements During policy evaluation, the agent provides remediation options to clients who fail to meet the mandatory requirements defined in the posture policy. End users must remediate to meet the requirements within the time specified in the remediation timer settings

• Question 355:

  An engineer needs a cloud solution that will monitor traffic, create incidents based on events, and integrate with other cloud solutions via an API. Which solution should be used to accomplish this goal?

  A. SIEM
  B. CASB
  C. Adaptive MFA
  D. Cisco Cloudlock
  D. Cisco Cloudlock

  ---

  Explanation

  https://docs.umbrella.com/cloudlock-documentation/docs/endpoints

  Note:+ Security information and event management (SIEM) platforms collect log and event data from securitysystems, networks and computers, and turn it into actionable security insights.+ An incident is a record of the triggering of an alerting policy. Cloud Monitoring opens an incident when acondition of an alerting policy has been met.

• Question 356:

  DRAG DROP

  Drag and drop the firewall capabilities from the left onto the corresponding firewall deployment modes on the right.

  Select and Place:

  

  

• Question 357:

  Under which two circumstances is a CoA issued? (Choose two)

  A. A new authentication rule was added to the policy on the Policy Service node.
  B. An endpoint is deleted on the Identity Service Engine server.
  C. A new Identity Source Sequence is created and referenced in the authentication policy.
  D. An endpoint is profiled for the first time.
  E. A new Identity Service Engine server is added to the deployment with the Administration persona
  B. An endpoint is deleted on the Identity Service Engine server.
  D. An endpoint is profiled for the first time.

  ---

  Explanation

  The profiling service issues the change of authorization in the following cases:?Endpoint deleted--When an endpoint is deleted from the Endpoints page and the endpoint is disconnectedor removed from the network.An exception action is configured--If you have an exception action configured per profile that leads to anunusual or an unacceptable event from that endpoint. The profiling service moves the endpoint to thecorresponding static profile by issuing a CoA.?An endpoint is profiled for the first time-- When an endpoint is not statically assigned and profiled for the first time; for example, the profile changes from an unknown to a known profile.+ An endpoint identity group has changed--When an endpoint is added or removed from an endpoint identity group that is used by an authorization policy.The profiling service issues a CoA when there is any change in an endpoint identity group, and the endpoint identity group is used in the authorization policy for the following:

  https://www.cisco.com/c/en/us/td/docs/security/ise/2- 1/admin_guide/b_ise_admin_guide_21/b_ise_admin_guide_20_chapter_010100.html

• Question 358:

  Which two mechanisms are used to control phishing attacks? (Choose two)

  A. Enable browser alerts for fraudulent websites.
  B. Define security group memberships.
  C. Revoke expired CRL of the websites.
  D. Use antispyware software.
  E. Implement email filtering techniques.
  A. Enable browser alerts for fraudulent websites.
  E. Implement email filtering techniques.

  ---

  Explanation

• Question 359:

  DRAG DROP

  Drag and drop the posture assessment flow actions from the left into a sequence on the right.

  Select and Place:

  

  

• Question 360:

  Which two products are used to forecast capacity needs accurately in real time? (Choose two.)

  A. Cisco Secure Workload
  B. Cisco Cloudlock
  C. Cisco Umbrella
  D. Cisco AppDynamics
  E. Cisco Workload Optimization Manager
  D. Cisco AppDynamics
  E. Cisco Workload Optimization Manager

  ---

  Explanation