Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 521:

  What is the difference between Cross-site Scripting and SQL Injection, attacks?

  A. Cross-site Scripting is an attack where code is injected into a database, whereas SQL Injection is an attack where code is injected into a browser.
  B. Cross-site Scripting is a brute force attack targeting remote sites, whereas SQL Injection is a social engineering attack.
  C. Cross-site Scripting is when executives in a corporation are attacked, whereas SQL Injection is when a database is manipulated.
  D. Cross-site Scripting is an attack where code is executed from the server side, whereas SQL Injection is an attack where code is executed from the client side.
  D. Cross-site Scripting is an attack where code is executed from the server side, whereas SQL Injection is an attack where code is executed from the client side.

  ---

  Explanation

• Question 522:

  A network administrator needs a solution to match traffic and allow or deny the traffic based on the type of application, not just the source or destination address and port used. Which kind of security product must the network administrator implement to meet this requirement?

  A. nextgeneration firewall
  B. web application firewall
  C. next generation intrusion prevention system
  D. intrusion detection system
  A. nextgeneration firewall

  ---

  Explanation

• Question 523:

  What are the two distribution methods available to an administrator when performing a fresh rollout of the Cisco AnyConnect Secure Mobility Client? (Choose two.)

  A. web deploy
  B. SFTP
  C. TFTP
  D. cloud update
  E. predeploy
  A. web deploy
  E. predeploy

  ---

  Explanation

• Question 524:

  Which attack is preventable by Cisco ESA but not by the Cisco WSA?

  A. buffer overflow
  B. DoS
  C. SQL injection
  D. phishing
  D. phishing

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/security/esa/esa13- 5/user_guide/b_ESA_Admin_Guide_13-5/m_advanced_phishing_protection.html

• Question 525:

  During a recent security audit, a Cisco IOS router with a working IPSEC configuration using IKEv1 was flagged for using a wildcard mask with the crypto isakmp key command. The VPN peer is a SOHO router with a dynamically assigned IP address. Dynamic DNS has been configured on the SOHO router to map the dynamic IP address to the host name of vpn.sohoroutercompany.com. In addition to the command crypto isakmp key Cisc123456789 hostname vpn.sohoroutercompany.com, what other two commands are now required on the Cisco IOS router far the VPN to continue to function after the wildcard command is removed? (Choose two.)

  A. ip host vpn.sohoroutercompany.com
  B. crypto isakmp identity hostname
  C. Add the dynamic keyword to the existing crypto map command
  D. fqdn vpn.sohoroutercompany.com
  E. ip name-server
  B. crypto isakmp identity hostname
  C. Add the dynamic keyword to the existing crypto map command

  ---

  Explanation

• Question 526:

  Which two VPN tunneling protocols support the use of IPsec to provide data integrity, authentication, and data encryption? (Choose two.)

  A. Secure Socket Tunneling Protocol
  B. OpenVPN
  C. Generic Routing Encapsulation Protocol
  D. Layer 2 Tunneling Protocol
  E. Point-to-Point Tunneling Protocol
  C. Generic Routing Encapsulation Protocol
  D. Layer 2 Tunneling Protocol

  ---

  Explanation

• Question 527:

  What can be integrated with Cisco Threat Intelligence Director to provide information about security threats, which allows the SOC to proactively automate responses to those threats?

  A. Cisco Umbrella
  B. External Threat Feeds
  C. Cisco Threat Grid
  D. Cisco Stealthwatch
  B. External Threat Feeds

  ---

  Explanation

  https://www.cisco.com/c/en/us/support/docs/storage-networking/security/214859-configure-and-troubleshoot-cisco-threat.html

• Question 528:

  What is a feature of an endpoint detection and response solution?

  A. ensuring the security of network devices by choosing which devices are allowed to reach the network
  B. capturing and clarifying data on email, endpoints, and servers to mitigate threats
  C. rapidly and consistently observing and examining data to mitigate threats
  D. preventing attacks by identifying harmful events with machine learning and conduct-based defense
  C. rapidly and consistently observing and examining data to mitigate threats

  ---

  Explanation

• Question 529:

  What are two benefits of Flexible NetFlow records? (Choose two)

  A. They allow the user to configure flow information to perform customized traffic identification
  B. They provide attack prevention by dropping the traffic
  C. They provide accounting and billing enhancements
  D. They converge multiple accounting technologies into one accounting mechanism
  E. They provide monitoring of a wider range of IP packet information from Layer 2 to 4
  A. They allow the user to configure flow information to perform customized traffic identification
  D. They converge multiple accounting technologies into one accounting mechanism

  ---

  Explanation

  https://www.cisco.com/en/US/docs/ios/fnetflow/configuration/guide/cust_fnflow_rec_mon_e xternal_docbase_0900e4b18055d0d2_4container_external_docbase_0900e4b181b413 d9.html#wp1057997Note: Traditional NetFlow allows us to monitor from Layer 2 to 4 but Flexible NetFlow goes beyond theselayers.

• Question 530:

  What are two functionalities of northbound and southbound APIs within Cisco SDN architecture? (Choose two.)

  A. Southbound APIs are used to define how SDN controllers integrate with applications.
  B. Southbound interfaces utilize device configurations such as VLANs and IP addresses.
  C. Northbound APIs utilize RESTful API methods such as GET, POST, and DELETE.
  D. Southbound APIs utilize CLI, SNMP, and RESTCONF.
  E. Northbound interfaces utilize OpenFlow and OpFlex to integrate with network devices.
  C. Northbound APIs utilize RESTful API methods such as GET, POST, and DELETE.
  D. Southbound APIs utilize CLI, SNMP, and RESTCONF.

  ---

  Explanation

  https://www.cisco.com/c/dam/global/sr_rs/training-events/2016/cisco-day-2016/pdf/APIC-EM_Vedran_Hafner.pdf