Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 451:

  What are two features of NetFlow flow monitoring? (Choose two)

  A. Can track ingress and egress information
  B. Include the flow record and the flow importer
  C. Copies all ingress flow information to an interface
  D. Does not required packet sampling on interfaces
  E. Can be used to track multicast, MPLS, or bridged traffic
  A. Can track ingress and egress information
  E. Can be used to track multicast, MPLS, or bridged traffic

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/netflow/configuration/15- mt/nf-15-mt-book/cfgmpls-netflow.html

• Question 452:

  What are two examples of code injection vulnerabilities? (Choose two.)

  A. XML external entity injection
  B. cross-site scripting
  C. session hijacking
  D. SQL injection
  E. arbitrary command injection
  D. SQL injection
  E. arbitrary command injection

  ---

  Explanation

• Question 453:

  What is the default action before identifying the URL during HTTPS inspection in Cisco Secure Firewall Threat Defense software?

  A. reset
  B. buffer
  C. pass
  D. drop
  C. pass

  ---

  Explanation

  Before identifying the URL during HTTPS inspection in Cisco Secure Firewall Threat Defense software, the default action is to "pass." This means that the traffic is allowed through without inspection until the URL can be identified, at which point appropriate security policies can be applied based on the URL categorization and reputation.

• Question 454:

  An engineer is configuring device-hardening on a router in order to prevent credentials from being seen if the router configuration was compromised. Which command should be used?

  A. service password-encryption
  B. username privilege 15 password
  C. service password-recovery
  D. username < username> password
  A. service password-encryption

  ---

  Explanation

• Question 455:

  A network engineer is tasked with configuring a Cisco ISE server to implement external authentication against Active Directory. What must be considered about the authentication requirements? (Choose two.)

  A. RADIUS communication must be permitted between the ISE server and the domain controller.
  B. The ISE account must be a domain administrator in Active Directory to perform JOIN operations.
  C. Active Directory only supports user authentication by using MSCHAPv2.
  D. LDAP communication must be permitted between the ISE server and the domain controller.
  E. Active Directory supports user and machine authentication by using MSCHAPv2.
  D. LDAP communication must be permitted between the ISE server and the domain controller.
  E. Active Directory supports user and machine authentication by using MSCHAPv2.

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/admin_guide/b_ise_admin_guide_23/b_ise_admin_guide_23_new_chapter_0100001.html#ID467

• Question 456:

  What is a function of 3DES in reference to cryptography?

  A. It hashes files.
  B. It creates one-time use passwords.
  C. It encrypts traffic.
  D. It generates private keys.
  C. It encrypts traffic.

  ---

  Explanation

• Question 457:

  What is a functional difference between Cisco AMP for Endpoints and Cisco Umbrella Roaming Client?

  A. The Umbrella Roaming client stops and tracks malicious activity on hosts, and AMP for Endpoints tracks only URL-based threats.
  B. The Umbrella Roaming Client authenticates users and provides segmentation, and AMP for Endpoints allows only for VPN connectivity
  C. AMP for Endpoints authenticates users and provides segmentation, and the Umbrella Roaming Client allows only for VPN connectivity.
  D. AMP for Endpoints stops and tracks malicious activity on hosts, and the Umbrella Roaming Client tracks only URL-based threats.
  D. AMP for Endpoints stops and tracks malicious activity on hosts, and the Umbrella Roaming Client tracks only URL-based threats.

  ---

  Explanation

• Question 458:

  What is a characteristic of an EDR solution and not of an EPP solution?

  A. stops all ransomware attacks
  B. retrospective analysis
  C. decrypts SSL traffic for better visibility
  D. performs signature-based detection
  B. retrospective analysis

  ---

  Explanation

• Question 459:

  Which MDM configuration provides scalability?

  A. pushing WPA2-Enterprise settings automatically to devices
  B. enabling use of device features such as camera use
  C. BYOD support without extra appliance or licenses
  D. automatic device classification with level 7 fingerprinting
  C. BYOD support without extra appliance or licenses

  ---

  Explanation

• Question 460:

  An administrator needs to configure the Cisco ASA via ASDM such that the network management system can actively monitor the host using SNMPv3. Which two tasks must be performed for this configuration? (Choose two.)

  A. Specify the SNMP manager and UDP port.
  B. Specify an SNMP user group
  C. Specify a community string.
  D. Add an SNMP USM entry
  E. Add an SNMP host access entry
  B. Specify an SNMP user group
  D. Add an SNMP USM entry

  ---

  Explanation