Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 511:

  Which Cisco Advanced Malware protection for Endpoints deployment architecture is designed to keep data within a network perimeter?

  A. cloud web services
  B. network AMP
  C. private cloud
  D. public cloud
  C. private cloud

  ---

  Explanation

• Question 512:

  What is the role of an endpoint in protecting a user from a phishing attack?

  A. Use Cisco Stealthwatch and Cisco ISE Integration.
  B. Utilize 802.1X network security to ensure unauthorized access to resources.
  C. Use machine learning models to help identify anomalies and determine expected sending behavior.
  D. Ensure that antivirus and anti malware software is up to date
  C. Use machine learning models to help identify anomalies and determine expected sending behavior.

  ---

  Explanation

• Question 513:

  Which two capabilities of Integration APIs are utilized with Cisco DNA Center? (Choose two.)

  A. Upgrade software on switches and routers
  B. Third party reporting
  C. Connect to ITSM platforms
  D. Create new SSIDs on a wireless LAN controller
  E. Automatically deploy new virtual routers
  B. Third party reporting
  C. Connect to ITSM platforms

  ---

  Explanation

  IT Service Management (ITSM) minimizes handoffs, reduces duplication of issues, and optimizes processes by integrating the Cisco DNA Center platform into incident-management, change-management and problem-management systems. It also integrates the Cisco DNA Center platform into approval- and pre-approval chains, and it links the Cisco DNA Center platform with formal change- and maintenance-window schedules.

  The platform also integrates with Reporting and Analytics capabilities for capacity planning, asset management, compliance control, and auditing. The Cisco DNA Center platform boosts IT efficiency and automation by integrating seamlessly with other IT systems through RESTful APIs.

• Question 514:

  An engineer notices traffic interruption on the network. Upon further investigation, it is learned that broadcast packets have been flooding the network. What must be configured, based on a predefined threshold, to address this issue?

  A. Bridge Protocol Data Unit guard
  B. embedded event monitoring
  C. storm control
  D. access control lists
  C. storm control

  ---

  Explanation

  ExplanationStorm control prevents traffic on a LAN from being disrupted by a broadcast, multicast, or unicast storm on one of the physical interfaces. A LAN storm occurs when packets flood the LAN, creating excessive traffic and degrading network performance. Errors in the protocol-stack implementation, mistakes in network configurations, or users issuing a denial-of-service attack can cause a storm.By using the " storm-control broadcast level [falling-threshold]" we can limit the broadcast traffic on the switch.

• Question 515:

  An organization is using DNS services for their network and want to help improve the security of the DNS infrastructure.

  Which action accomplishes this task?

  A. Use DNSSEC between the endpoints and Cisco Umbrella DNS servers.
  B. Modify the Cisco Umbrella configuration to pass queries only to non-DNSSEC capable zones.
  C. Integrate Cisco Umbrella with Cisco CloudLock to ensure that DNSSEC is functional.
  D. Configure Cisco Umbrella and use DNSSEC for domain authentication to authoritative servers.
  D. Configure Cisco Umbrella and use DNSSEC for domain authentication to authoritative servers.

  ---

  Explanation

• Question 516:

  Which two devices support WCCP for traffic redirection? (Choose two.)

  A. Cisco Secure Web Appliance
  B. Cisco IOS
  C. proxy server
  D. Cisco ASA
  E. Cisco IPS
  B. Cisco IOS
  D. Cisco ASA

  ---

  Explanation

• Question 517:

  Which two probes are configured to gather attributes of connected endpoints using Cisco Identity Services Engine? (Choose two)

  A. RADIUS
  B. TACACS+
  C. DHCP
  D. sFlow
  E. SMTP
  A. RADIUS
  C. DHCP

  ---

  Explanation

• Question 518:

  What is the primary benefit of deploying an ESA in hybrid mode?

  A. You can fine-tune its settings to provide the optimum balance between security and performance for your environment
  B. It provides the lowest total cost of ownership by reducing the need for physical appliances
  C. It provides maximum protection and control of outbound messages
  D. It provides email security while supporting the transition to the cloud
  D. It provides email security while supporting the transition to the cloud

  ---

  Explanation

  Cisco Hybrid Email Security is a unique service offering that facilitates the deployment of your email securityinfrastructure both on premises and in the cloud. You can change the number of on-premises versus cloudusers at any time throughout the term of your contract, assuming the total number of users does not change.This allows for deployment flexibility as your organization's needs change.

• Question 519:

  What is a required prerequisite to enable malware file scanning for the Secure Internet Gateway?

  A. Enable IP Layer enforcement.
  B. Activate the Advanced Malware Protection license
  C. Activate SSL decryption.
  D. Enable Intelligent Proxy.
  D. Enable Intelligent Proxy.

  ---

  Explanation

• Question 520:

  What is the role of Cisco Umbrella Roaming when it is installed on an endpoint?

  A. To protect the endpoint against malicious file transfers
  B. To ensure that assets are secure from malicious links on and off the corporate network
  C. To establish secure VPN connectivity to the corporate network
  D. To enforce posture compliance and mandatory software
  B. To ensure that assets are secure from malicious links on and off the corporate network

  ---

  Explanation

  Umbrella Roaming is a cloud-delivered security service for Cisco's next-generation firewall. It protects your employees even when they are off the VPN.