Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 571:

  An organization has a Cisco ESA set up with policies and would like to customize the action assigned for violations. The organization wants a copy of the message to be delivered with a message added to flag it as a DLP violation. Which actions must be performed in order to provide this capability?

  A. deliver and send copies to other recipients
  B. quarantine and send a DLP violation notification
  C. quarantine and alter the subject header with a DLP violation
  D. deliver and add disclaimer text
  D. deliver and add disclaimer text

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/security/esa/esa12- 0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_010001.html

• Question 572:

  What are two DDoS attack categories? (Choose two)

  A. sequential
  B. protocol
  C. database
  D. volume-based
  E. screen-based
  B. protocol
  D. volume-based

  ---

  Explanation

  There are three basic categories of attack:+ volume-based attacks, which use high traffic to inundate the network bandwidth+ protocol attacks, which focus on exploiting server resources+ application attacks, which focus on web applications and are considered the most sophisticated and serious type of attacks Reference: https://www.esecurityplanet.com/networks/types-of-ddos-attacks/

• Question 573:

  A network administrator has installed Secure Endpoint in the network. During setup it was noticed an endpoint has been exhibiting unusual behavior, including slow performance and unexpected network activity. Administrator discovers a suspicious file named abc0467145535.exe running in the background. Which step must the network administrator take to investigate and remediate the potential malware?

  A. Isolate the endpoint from the network.
  B. Reset the endpoint password and enable multi-factor authentication.
  C. Format and reinstall the operating system on the endpoint.
  D. Disable all non-essential processes running on the endpoint.
  A. Isolate the endpoint from the network.

  ---

  Explanation

• Question 574:

  Which policy represents a shared set of features or parameters that define the aspects of a managed device that are likely to be similar to other managed devices in a deployment?

  A. Group Policy
  B. Access Control Policy
  C. Device Management Policy
  D. Platform Settings policy
  D. Platform Settings policy

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc- configguide-v62/platform_settings_policies_for_managed_devices.html

  Therefore the answer should be "Platform Settings Policy", not "Platform Service Policy" but it is the bestanswer here so we have to choose it.

• Question 575:

  Which two components do southbound APIs use to communicate with downstream devices? (Choose two.)

  A. services running over the network
  B. OpenFlow
  C. external application APIs
  D. applications running over the network
  E. OpFlex
  B. OpenFlow
  E. OpFlex

  ---

  Explanation

• Question 576:

  A network engineer must create an access control list on a Cisco Adaptive Security Appliance firewall. The access control list must permit HTTP traffic to the internet from the organization's inside network 192.168.1.0/24. Which IOS command must oe used to create the access control list?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  C. Option C

  ---

  Explanation

• Question 577:

  Which feature within Cisco Umbrella allows for the ability to inspect secure HTTP traffic?

  A. File Analysis
  B. SafeSearch
  C. SSL Decryption
  D. Destination Lists
  C. SSL Decryption

  ---

  Explanation

  https://support.umbrella.com/hc/en-us/articles/115004564126-SSL-Decryption- in-the-IntelligentProxy

• Question 578:

  Which two application layer preprocessors are used by Firepower Next Generation Intrusion Prevention System? (Choose two)

  A. packet decoder
  B. SIP
  C. modbus
  D. inline normalization
  E. SSL
  B. SIP
  E. SSL

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Application_Layer_Preprocessors.html

• Question 579:

  Refer to the exhibit. Network access control is implemented on the LAN and an engineer must now configure the switch port level so that users with new corporate devices can connect to the corporate LAN without issues. What must be configured next?

  

  A. clear port-security dynamic
  B. shut and no shut
  C. errdisable recovery cause psesecure-violation
  D. authentication violation replace
  D. authentication violation replace

  ---

  Explanation

• Question 580:

  Which technology reduces data loss by identifying sensitive information stored in public computing environments?

  A. Cisco SDA
  B. Cisco Firepower
  C. Cisco HyperFlex
  D. Cisco Cloudlock
  D. Cisco Cloudlock

  ---

  Explanation

  https://www.cisco.com/c/dam/en/us/products/collateral/security/cloudlock/cisco-cloudlock-cloud-data-security-datasheet.pdf