Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 411:

  What must be disabled on a Cisco Secure Web Appliance to ensure HTTPS traffic with a good reputation score bypasses decryption?

  A. Decrypt ACL
  B. Decrypt Policies
  C. Decrypt for End-User Acknowledgment
  D. Decrypt for End-User Notification
  B. Decrypt Policies

  ---

  Explanation

• Question 412:

  An organization plans to upgrade its current email security solutions, and an engineer must deploy Cisco Secure Email. The requirements for the upgrade are:

  1. Implement Data Loss Prevention 2. Implement mail encryption 3. Integrate with an existing Cisco IronPort Secure Email Gateway solution

  Which Cisco Secure Email license needed to accomplish this task?

  A. Cisco Secure Email Domain Protection
  B. Cisco Secure Email Inbound Essentials
  C. Cisco Secure Email Outbound Essentials
  D. Cisco Secure Email Phishing Defense
  C. Cisco Secure Email Outbound Essentials

  ---

  Explanation

• Question 413:

  What provides the ability to program and monitor networks from somewhere other than the DNAC GUI?

  A. NetFlow
  B. desktop client
  C. ASDM
  D. API
  D. API

  ---

  Explanation

• Question 414:

  Which Cisco solution extends network visibility, threat detection, and analytics to public cloud environments?

  A. Cisco Umbrella
  B. Cisco Stealthwatch Cloud
  C. Cisco Appdynamics
  D. Cisco CloudLock
  B. Cisco Stealthwatch Cloud

  ---

  Explanation

• Question 415:

  Which algorithm is an NGE hash function?

  A. HMAC
  B. SHA-1
  C. MD5
  D. SHA-2
  D. SHA-2

  ---

  Explanation

• Question 416:

  What is the purpose of CA in a PKI?

  A. to generate a pkcs12 certificate from certificate key-pair
  B. to issue and revoke digital certificates
  C. to certify the ownership of a public key by the named subject
  D. to create the private key for a digital certificate
  B. to issue and revoke digital certificates

  ---

  Explanation

• Question 417:

  What is the Cisco API-based broker that helps reduce compromises, application risks, and data breaches in an environment that is not on-premise?

  A. Cisco Cloudlock
  B. Cisco Umbrella
  C. Cisco AMP
  D. Cisco App Dynamics
  A. Cisco Cloudlock

  ---

  Explanation

  Cisco Cloudlock is a cloud-native cloud access security broker (CASB) that helps you move to the cloud safely.It protects your cloud users, data, and apps. Cisco Cloudlock provides visibility and compliance checks,protects data against misuse and exfiltration, and provides threat protections against malware like ransomware.

• Question 418:

  What is the difference between deceptive phishing and spear phishing?

  A. Deceptive phishing is an attacked aimed at a specific user in the organization who holds a C-level role.
  B. A spear phishing campaign is aimed at a specific person versus a group of people.
  C. Spear phishing is when the attack is aimed at the C-level executives of an organization.
  D. Deceptive phishing hijacks and manipulates the DNS server of the victim and redirects the user to a false webpage.
  B. A spear phishing campaign is aimed at a specific person versus a group of people.

  ---

  Explanation

  In deceptive phishing, fraudsters impersonate a legitimate company in an attempt to steal people's personal data or login credentials. Those emails frequently use threats and a sense of urgency to scare users into doing what the attackers want. Spear phishing is carefully designed to get a single recipient to respond. Criminals select an individual target within an organization, using social media and other public information ?and craft a fake email tailored for that person.

• Question 419:

  An engineer configures new features within the Cisco Umbrella dashboard and wants to identify and proxy traffic that is categorized as risky domains and may contain safe and malicious content. Which action accomplishes these objectives?

  A. Configure URL filtering within Cisco Umbrella to track the URLs and proxy the requests for those categories and below.
  B. Configure intelligent proxy within Cisco Umbrella to intercept and proxy the requests for only those categories.
  C. Upload the threat intelligence database to Cisco Umbrella for the most current information on reputations and to have the destination lists block them.
  D. Create a new site within Cisco Umbrella to block requests from those categories so they can be sent to the proxy device.
  B. Configure intelligent proxy within Cisco Umbrella to intercept and proxy the requests for only those categories.

  ---

  Explanation

  The intelligent proxy is the ability for Umbrella to intercept and proxy requests for malicious files embedded within certain so-called "grey" domains. Some websites, especially those with large user communities or the ability to upload and share files, have content that most users want to access while also posing a risk because of the possibility of hosting malware. Administrators wouldn't want to block access to the whole "grey" domain for everyone but they also don't want your users to access files that could harm their computers, compromise your company data or worse!

• Question 420:

  What does endpoint isolation in Cisco AMP for Endpoints security protect from?

  A. an infection spreading across the network
  B. a malware spreading across the user device
  C. an infection spreading across the LDAP or Active Directory domain from a user account
  D. a malware spreading across the LDAP or Active Directory domain from a user account
  A. an infection spreading across the network

  ---

  Explanation

  When an endpoint is identified as compromised or infected with malware, endpoint isolation isolates the infected endpoint from the network to prevent the infection from spreading to other devices or systems. By isolating the infected endpoint, it helps contain the threat and prevents lateral movement of the malware within the network. This helps in minimizing the impact of the infection and allows security teams to investigate and remediate the compromised endpoint effectively.