Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 41:

  Which technology provides a combination of endpoint protection, endpoint detection, and response?

  A. Cisco AMP
  B. Cisco Talos
  C. Cisco Threat Grid
  D. Cisco Umbrella
  A. Cisco AMP

  ---

  Explanation

• Question 42:

  What is the difference between a vulnerability and an exploit?

  A. A vulnerability is a hypothetical event for an attacker to exploit
  B. A vulnerability is a weakness that can be exploited by an attacker
  C. An exploit is a weakness that can cause a vulnerability in the network
  D. An exploit is a hypothetical event that causes a vulnerability in the network
  B. A vulnerability is a weakness that can be exploited by an attacker

  ---

  Explanation

  A vulnerability is a weakness or flaw in a system, software, or network that can be exploited by an attacker to compromise the security or functionality of the system. A vulnerability can be caused by a variety of factors, including coding errors, misconfigurations, or design flaws.

  An exploit, on the other hand, is a tool or technique used by an attacker to take advantage of a vulnerability and gain unauthorized access or control over the target system. An exploit can be a piece of software, a script, or a command that leverages a vulnerability to execute malicious code or actions on the target system.

  Therefore, the difference between a vulnerability and an exploit is that a vulnerability is a weakness that can be exploited by an attacker, while an exploit is the means by which an attacker takes advantage of a vulnerability to compromise the system.

• Question 43:

  An engineer is configuring Cisco Secure Web Appliance and needs to deploy it in transparent mode. Which configuration component must be used to accomplish this goal?

  A. MDA on the router
  B. WCCP on switch
  C. PBR on Cisco Secure Web Appliance
  D. DNS resolution on Cisco Secure Web Appliance
  B. WCCP on switch

  ---

  Explanation

• Question 44:

  An engineer is configuring DHCP on a Cisco switch and wants to ensure that a DHCP packet will be dropped. Under which condition will this occur?

  A. A packet from a DHCP server is received from inside the network or firewall.
  B. All packets are dropped until the administrator manually enters the approved servers into the DHCP snooping database.
  C. A packet is received on an untrusted interface, and the source MAC address and the DHCP client hardware address do not match.
  D. A DHCP relay agent forwards a DHCP packet that includes a relay-agent IP address that is 0.0.0.0.
  C. A packet is received on an untrusted interface, and the source MAC address and the DHCP client hardware address do not match.

  ---

  Explanation

• Question 45:

  Which technology provides the benefit of Layer 3 through Layer 7 innovative deep packet inspection, enabling the platform to identify and output various applications within the network traffic flows?

  A. Cisco NBAR2
  B. Cisco ASAV
  C. Account on Resolution
  D. Cisco Prime Infrastructure
  A. Cisco NBAR2

  ---

  Explanation

• Question 46:

  Which two aspects of the IaaS cloud service model are managed by the service provider? (Choose two.)

  A. virtual machines
  B. physical network
  C. applications
  D. hypervisors
  E. virtual network
  B. physical network
  D. hypervisors

  ---

  Explanation

• Question 47:

  What is a functional difference between Cisco Secure Endpoint and Cisco Umbrella Roaming Client?

  A. Secure Endpoint authenticates users and provides segmentation, and the Umbrella Roaming Client allows only for VPN connectivity.
  B. Secure Endpoint stops and tracks malicious activity on hosts, and the Umbrella Roaming Client tracks only URL-based threats.
  C. The Umbrella Roaming Client authenticates users and provides segmentation, and Secure Endpoint allows only for VPN connectivity.
  D. The Umbrella Roaming client stops and tracks malicious activity on hosts, and Secure Endpoint tracks only URL-based threats.
  B. Secure Endpoint stops and tracks malicious activity on hosts, and the Umbrella Roaming Client tracks only URL-based threats.

  ---

  Explanation

• Question 48:

  Which security solution protects users leveraging DNS-layer security?

  A. Cisco ISE
  B. Cisco FTD
  C. Cisco Umbrella
  D. Cisco ASA
  C. Cisco Umbrella

  ---

  Explanation

• Question 49:

  For which type of attack is multifactor authentication an effective deterrent?

  A. syn flood
  B. phishing
  C. teardrop
  D. ping of death
  B. phishing

  ---

  Explanation

• Question 50:

  On Cisco Firepower Management Center, which policy is used to collect health modules alerts from managed devices?

  A. health policy
  B. system policy
  C. correlation policy
  D. access control policy
  E. health awareness policy
  A. health policy

  ---

  Explanation