Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 391:

  Refer to the exhibit.

  

  An engineer must configure a new Cisco ISE backend server as a RADIUS server to provide AAA for all access requests from the client to the ISE-Frontend server.

  Which Cisco ISE configuration must be used?

  A. Set 10.11.1.2 as a network device in ISE-Frontend. Set port 1700/2083 for RADIUS authentication.
  B. Set 10.11.1.1 as the external RADIUS server in ISE-Frontend. Set ports 1812/1813 for authentication and accounting.
  C. Set 10.11.1.2 as the external RADIUS server in ISE-Frontend. Set ports 1812/1813 for authentication and accounting.
  D. Set 10.11.1.1 as a network device in ISE-Frontend. Set ports 1700/2083 for RADIUS authentication.
  C. Set 10.11.1.2 as the external RADIUS server in ISE-Frontend. Set ports 1812/1813 for authentication and accounting.

  ---

  Explanation

• Question 392:

  An engineer is configuring their router to send NetfFow data to Stealthwatch which has an IP address of 1.1.1.1 using the flow record Stealthwatch406143794 command. Which additional command is required to complete the flow record?

  A. transport udp 2055
  B. match ipv4 ttl
  C. cache timeout active 60
  D. destination 1.1.1.1
  B. match ipv4 ttl

  ---

  Explanation

  https://www.cisco.com/c/dam/en/us/td/docs/security/stealthwatch/netflow/config-trouble-netflow-stealth.pdf

• Question 393:

  Which two solutions help combat social engineering and phishing at the endpoint level? (Choose two.)

  A. Cisco Umbrella
  B. Cisco ISE
  C. Cisco DNA Center
  D. Cisco TrustSec
  E. Cisco Duo Security
  A. Cisco Umbrella
  E. Cisco Duo Security

  ---

  Explanation

• Question 394:

  What is an advantage of network telemetry over SNMP pulls?

  A. accuracy
  B. encapsulation
  C. security
  D. scalability
  D. scalability

  ---

  Explanation

• Question 395:

  Which type of data does the Cisco Stealthwatch system collect and analyze from routers, switches, and firewalls?

  A. NTP
  B. syslog
  C. SNMP
  D. NetFlow
  D. NetFlow

  ---

  Explanation

• Question 396:

  Which component performs the resolution between the tunnel address and mGRE address in DMVPN?

  A. GDOI
  B. NBMA
  C. NHRP
  D. NHS
  C. NHRP

  ---

  Explanation

• Question 397:

  A mall provides security services to customers with a shared appliance. The mall wants separation of management on the shared appliance. Which ASA deployment mode meets these needs?

  A. routed mode
  B. transparent mode
  C. multiple context mode
  D. multiple zone mode
  C. multiple context mode

  ---

  Explanation

• Question 398:

  What is the purpose of the My Devices Portal in a Cisco ISE environment?

  A. to register new laptops and mobile devices
  B. to request a newly provisioned mobile device
  C. to provision userless and agentless systems
  D. to manage and deploy antivirus definitions and patches on systems owned by the end user
  A. to register new laptops and mobile devices

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/security/ise/2- 4/mydevices/b_mydevices_2x.html

• Question 399:

  Which key feature of Cisco ZFW is unique among other Cisco IOS firewall solutions?

  A. SSL inspection
  B. security levels
  C. stateless inspection
  D. security zones
  D. security zones

  ---

  Explanation

• Question 400:

  An engineer is implementing NAC for LAN users on a segmented network. The engineer confirms that the device of each user is supported and the Cisco switch configuration is correct.

  Which configuration should be made next to ensure there are no authentication issues?

  A. Disable the host firewall.
  B. Enable TACACS+ on the switch.
  C. Open TCP port 49.
  D. Permit UDP port 1812.
  D. Permit UDP port 1812.

  ---

  Explanation