Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 531:

  What is a difference between FlexVPN and DMVPN?

  A. DMVPN uses IKEv1 or IKEv2. FlexVPN only uses IKEv1
  B. DMVPN uses only IKEv1. FlexVPN uses only IKEv2
  C. FlexVPN uses IKEv2. DMVPN uses IKEv1 or IKEv2
  D. FlexVPN uses IKEv1 or IKEv2. DMVPN uses only IKEv2
  C. FlexVPN uses IKEv2. DMVPN uses IKEv1 or IKEv2

  ---

  Explanation

• Question 532:

  An engineer is configuring a Cisco Secure Email Cloud Gateway instance to send logs to an external server for auditing. For security purposes, a username and SSH key with the fingerprint d0:46:03:8e:d7:f1:bb:9b:33:13:94:60:49:da:9b:e3 has been generated on the remote log server that accepts only the SSHv2 protocol. Which log retrieval method must be configured in the log subscription?

  A. syslog push
  B. manually download
  C. SCP push
  D. FTP push
  C. SCP push

  ---

  Explanation

• Question 533:

  Which statement about IOS zone-based firewalls is true?

  A. An unassigned interface can communicate with assigned interfaces
  B. Only one interface can be assigned to a zone.
  C. An interface can be assigned to multiple zones.
  D. An interface can be assigned only to one zone.
  D. An interface can be assigned only to one zone.

  ---

  Explanation

  https://www.cisco.com/c/en/us/support/docs/security/ios-firewall/98628-zone-design-guide.html

• Question 534:

  Which IPsec mode must be used when encrypting data over a public network between two servers with RFC1918 IP addresses?

  A. main mode
  B. aggressive mode
  C. transport mode
  D. tunnel mode
  D. tunnel mode

  ---

  Explanation

• Question 535:

  What is the purpose of the certificate signing request when adding a new certificate for a server?

  A. It is the password for the certificate that is needed to install it with.
  B. It provides the server information so a certificate can be created and signed
  C. It provides the certificate client information so the server can authenticate against it when installing
  D. It is the certificate that will be loaded onto the server
  B. It provides the server information so a certificate can be created and signed

  ---

  Explanation

  A certificate signing request (CSR) is one of the first steps towards getting your own SSL Certificate. Generated on the same server you plan to install the certificate on, the CSR contains information (e.g. common name, organization, country) that the Certificate Authority (CA) will use to create your certificate. It also contains the public key that will be included in your certificate and is signed with the corresponding private key

• Question 536:

  What is the purpose of joining Cisco WSAs to an appliance group?

  A. All WSAs in the group can view file analysis results.
  B. The group supports improved redundancy
  C. It supports cluster operations to expedite the malware analysis process.
  D. It simplifies the task of patching multiple appliances.
  A. All WSAs in the group can view file analysis results.

  ---

  Explanation

• Question 537:

  Which Cisco security solution gives the most complete view of the relationships and evolution of Internet domains, IPs, and files, and helps to pinpoint attackers' infrastructures and predict future threat?

  A. Cisco Umbrella Investigate
  B. Cisco Stealthwatch
  C. Cisco pxGrid
  D. Cisco Stealthwatch Cloud
  A. Cisco Umbrella Investigate

  ---

  Explanation

  https://umbrella.cisco.com/products/umbrella-investigate

• Question 538:

  A company discovered an attack propagating through their network via a file. A custom file policy was created in order to track this in the future and ensure no other endpoints execute the infected file. In addition, it was discovered during testing that the scans are not detecting the file as an indicator of compromise. What must be done in order to ensure that the created is functioning as it should?

  A. Create an IP block list for the website from which the file was downloaded
  B. Block the application that the file was using to open
  C. Upload the hash for the file into the policy
  D. Send the file to Cisco Threat Grid for dynamic analysis
  C. Upload the hash for the file into the policy

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc-config-guide-v623/file_policies_and_advanced_malware_protection.html

• Question 539:

  Which Cisco cloud security software centrally manages policies on multiple platforms such as Cisco ASA, Cisco Firepower, Cisco Meraki, and AWS?

  A. Cisco Defense Orchestrator
  B. Cisco Configuration Professional
  C. Cisco Secureworks
  D. Cisco DNAC
  A. Cisco Defense Orchestrator

  ---

  Explanation

• Question 540:

  Refer to the exhibit.

  

  What will happen when this Python script is run?

  A. The compromised computers and malware trajectories will be received from Cisco AMP
  B. The list of computers and their current vulnerabilities will be received from Cisco AMP
  C. The compromised computers and what compromised them will be received from Cisco AMP
  D. The list of computers, policies, and connector statuses will be received from Cisco AMP
  D. The list of computers, policies, and connector statuses will be received from Cisco AMP

  ---

  Explanation

  https://api- docs.amp.cisco.com/api_actions/details?api_action=GET+%2Fv1%2Fcomputersandapi_host =api.apjc.amp.cisco.comandapi_resource=Computerandapi_version=v1