Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 431:

  Which endpoint solution protects a user from a phishing attack?

  A. Cisco Identity Services Engine
  B. Cisco AnyConnect with ISE Posture module
  C. Cisco AnyConnect with Network Access Manager module
  D. Cisco AnyConnect with Umbrella Roaming Security module
  D. Cisco AnyConnect with Umbrella Roaming Security module

  ---

  Explanation

• Question 432:

  Which IETF attribute is supported for the RADIUS CoA feature?

  A. 24 State
  B. 30 Calling-Station-ID
  C. 42 Acct-Session-ID
  D. 81 Message-Authenticator
  A. 24 State

  ---

  Explanation

• Question 433:

  Which type of dashboard does Cisco DNA Center provide for complete control of the network?

  A. service management
  B. centralized management
  C. application management
  D. distributed management
  B. centralized management

  ---

  Explanation

  https://www.cisco.com/c/en/us/products/collateral/cloud-systems- management/dna-center/nb-06- dna-center-faq-cte-en.html

• Question 434:

  Refer to the exhibit.

  

  Which command results in these messages when attempting to troubleshoot an IPsec VPN connection?

  A. debug crypto isakmp connection
  B. debug crypto ipsec
  C. debug crypto ipsec endpoint
  D. debug crypto isakmp
  D. debug crypto isakmp

  ---

  Explanation

• Question 435:

  DRAG DROP

  Drag and drop the steps from the left into the correct order on the right to enable AppDynamics to monitor an EC2 instance in Amazon Web Services.

  Select and Place:

  

  

• Question 436:

  Which solution should be leveraged for secure access of a CI/CD pipeline?

  A. Duo Network Gateway
  B. remote access client
  C. SSL WebVPN
  D. Cisco FTD network gateway
  A. Duo Network Gateway

  ---

  Explanation

• Question 437:

  An engineer is implementing NTP authentication within their network and has configured both the client and server devices with the command ntp authentication-key 1 md5 Cisc392368270. The server at 1.1.1.1 is attempting to authenticate to the client at 1.1.1.2, however it is unable to do so. Which command is required to enable the client to accept the server's authentication key?

  A. ntp peer 1.1.1.1 key 1
  B. ntp server 1.1.1.1 key 1
  C. ntp server 1.1.1.2 key 1
  D. ntp peer 1.1.1.2 key 1
  B. ntp server 1.1.1.1 key 1

  ---

  Explanation

  To configure an NTP enabled router to require authentication when other devices connect to it, use thefollowing commands:NTP_Server(config)#ntp authentication-key 2 md5 securitytutNTP_Server(config)#ntp authenticateNTP_Server (config)#ntp trusted-key 2Then you must configure the same authentication-key on the client router:NTP_Client(config)#ntp authentication-key 2 md5 securitytutNTP_Client(config)#ntp authenticateNTP_Client(config)#ntp trusted-key 2NTP_Client(config)#ntp server 10.10.10.1 key 2Note: To configure a Cisco device as a NTP client, use the command ntp server . For example:Router(config)#ntp server 10.10.10.1. This command will instruct the router to query 10.10.10.1 for the time.

• Question 438:

  Which method is used to deploy certificates and configure the supplicant on mobile devices to gain access to network resources?

  A. BYOD on boarding
  B. Simple Certificate Enrollment Protocol
  C. Client provisioning
  D. MAC authentication bypass
  C. Client provisioning

  ---

  Explanation

• Question 439:

  A switch with Dynamic ARP Inspection enabled has received a spoofed ARP response on a trusted interface.

  How does the switch behave in this situation?

  A. It forwards the packet after validation by using the MAC Binding Table.
  B. It drops the packet after validation by using the IP and MAC Binding Table.
  C. It forwards the packet without validation.
  D. It drops the packet without validation.
  C. It forwards the packet without validation.

  ---

  Explanation

• Question 440:

  An engineer needs to configure an access control policy rule to always send traffic for inspection without using the default action. Which action should be configured for this rule?

  A. monitor
  B. allow
  C. block
  D. trust
  B. allow

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc- config-guide- v623/access_control_using_intrusion_and_file_policies.html#:~:text=File%20Policies- ,Access%20Control%20Traffic%20Handling%20with%20Intrusion%20and%20File%20Poli cies,-The%20following%20diagram the first three access control rules in the policy--Monitor, Trust, and Block--cannot inspect matching traffic. Monitor rules track and log but do not inspect network traffic, so the system continues to match traffic against additional rules to determine whether to permit or deny it https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc- config-guide-v623/access_control_rules.html#:~:text=Rule%20Blocking%20Actions- ,Access%20Control%20Rule%20Allow%20Action,network% 20discovery%20policy%3B%2 0additionally%2C%20application%20discovery%20is%20limited%20for%20encrypted%20s essions.,-Related%20Concepts