Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 381:

  What is a characteristic of Dynamic ARP Inspection?

  A. DAI determines the validity of an ARP packet based on valid IP to MAC address bindings from the DHCP snooping binding database.
  B. In a typical network, make all ports as trusted except for the ports connecting to switches, which are untrusted
  C. DAI associates a trust state with each switch.
  D. DAI intercepts all ARP requests and responses on trusted ports only.
  A. DAI determines the validity of an ARP packet based on valid IP to MAC address bindings from the DHCP snooping binding database.

  ---

  Explanation

  Dynamic ARP Inspection To prevent ARP poisoning attacks such as the one described in the previous section, a switch must ensure that only valid ARP requests and responses are relayed. DAI prevents these attacks by intercepting all ARP requests and responses. Each of these intercepted packets is verified for valid MAC address to IP address bindings before the local ARP cache is updated or the packet is forwarded to the appropriate destination. Invalid ARP packets are dropped.

  DAI determines the validity of an ARP packet based on valid MAC address to IP address bindings stored in a trusted database. This database is built at runtime by DHCP snooping, provided that it is enabled on the VLANs and on the switch in question. In addition, DAI can also validate ARP packets against user-configured ARP ACLs in order to handle hosts that use statically configured IP addresses.

  DAI can also be configured to drop ARP packets when the IP addresses in the packet are invalid or when the MAC addresses in the body of the ARP packet do not match the addresses specified in the Ethernet header.

• Question 382:

  Which Cisco platform processes behavior baselines, monitors for deviations, and reviews for malicious processes in data center traffic and servers while performing software vulnerability detection?

  A. Cisco Tetration
  B. Cisco ISE
  C. Cisco AMP for Network
  D. Cisco AnyConnect
  A. Cisco Tetration

  ---

  Explanation

• Question 383:

  Why would a user choose an on-premises ESA versus the CES solution?

  A. Sensitive data must remain onsite.
  B. Demand is unpredictable.
  C. The server team wants to outsource this service.
  D. ESA is deployed inline.
  A. Sensitive data must remain onsite.

  ---

  Explanation

• Question 384:

  What is a characteristic of Cisco ASA Netflow v9 Secure Event Logging?

  A. It tracks flow-create, flow-teardown, and flow-denied events.
  B. It provides stateless IP flow tracking that exports all records of a specific flow.
  C. It tracks the flow continuously and provides updates every 10 seconds.
  D. Its events match all traffic classes in parallel.
  A. It tracks flow-create, flow-teardown, and flow-denied events.

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/security/asa/asa92/configuration/general/asa- general-cli/ monitor-nsel.html

• Question 385:

  What is considered a cloud data breach?

  A. cyber threats posing as authorized entities
  B. exploitation of cloud application access
  C. deprivation of computing resources
  D. leaked information that is private
  B. exploitation of cloud application access

  ---

  Explanation

• Question 386:

  An administrator wants to ensure that all endpoints are compliant before users are allowed access on the corporate network. The endpoints must have the corporate antivirus application installed and be running the latest build of Windows 10.

  What must the administrator implement to ensure that all devices are compliant before they are allowed on the network?

  A. Cisco Identity Services Engine and AnyConnect Posture module
  B. Cisco Stealthwatch and Cisco Identity Services Engine integration
  C. Cisco ASA firewall with Dynamic Access Policies configured
  D. Cisco Identity Services Engine with PxGrid services enabled
  A. Cisco Identity Services Engine and AnyConnect Posture module

  ---

  Explanation

• Question 387:

  What is the function of the Context Directory Agent?

  A. maintains users' group memberships
  B. relays user authentication requests from Web Security Appliance to Active Directory
  C. reads the Active Directory logs to map IP addresses to usernames
  D. accepts user authentication requests on behalf of Web Security Appliance for user identification
  C. reads the Active Directory logs to map IP addresses to usernames

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/security/ibf/cda_10/Install_Config_guide/cda10/cda_ oveviw.html

• Question 388:

  An engineer is implementing Cisco CES in an existing Microsoft Office 365 environment and must route inbound email to Cisco CE.. record must be modified to accomplish this task?

  A. CNAME
  B. MX
  C. SPF
  D. DKIM
  B. MX

  ---

  Explanation

• Question 389:

  Refer to the exhibit. Which task is the Python script performing by using the Cisco Umbrella API?

  

  A. changing the disposition of domains that were previously malicious to clean
  B. checking the disposition of previously identified domains in bulk
  C. changing the disposition of domains that were previously clean to malicious
  D. checking the disposition of potentially malicious domains in bulk
  B. checking the disposition of previously identified domains in bulk

  ---

  Explanation

• Question 390:

  When configuring ISAKMP for IKEv1 Phase1 on a Cisco IOS router, an administrator needs to input the command crypto isakmp key cisco address 0.0.0.0. The administrator is not sure what the IP addressing in this command issued for.

  What would be the effect of changing the IP address from 0.0.0.0 to 1.2.3.4?

  A. The key server that is managing the keys for the connection will be at 1.2.3.4
  B. The remote connection will only be allowed from 1.2.3.4
  C. The address that will be used as the crypto validation authority
  D. All IP addresses other than 1.2.3.4 will be allowed
  B. The remote connection will only be allowed from 1.2.3.4

  ---

  Explanation

  The command crypto isakmp key cisco address 1.2.3.4 authenticates the IP address of the 1.2.3.4 peer by using the key cisco. The address of "0.0.0.0" will authenticate any address with this key