Cisco CCNP 350-701 Questions & Answers

• Question 571:

  For which two conditions can an endpoint be checked using ISE posture assessment? (Choose two)

  A. Windows service

  B. computer identity

  C. user identity

  D. Windows firewall

  E. default browser

  Correct Answer: AD

• Question 572:

  Which network monitoring solution uses streams and pushes operational data to provide a near real-time view of activity?

  A. SNMP

  B. SMTP

  C. syslog

  D. model-driven telemetry

  Correct Answer: D

  Reference: https://developer.cisco.com/docs/ios-xe/#!streaming-telemetry-quick-start-guide

• Question 573:

  Which feature of Cisco ASA allows VPN users to be postured against Cisco ISE without requiring an inline posture node?

  A. RADIUS Change of Authorization

  B. device tracking

  C. DHCP snooping

  D. VLAN hopping

  Correct Answer: A

• Question 574:

  Which feature within Cisco Umbrella allows for the ability to inspect secure HTTP traffic?

  A. File Analysis

  B. SafeSearch

  C. SSL Decryption

  D. Destination Lists

  Correct Answer: C

  Reference: https://support.umbrella.com/hc/en-us/articles/115004564126-SSL-Decryption- in-the-IntelligentProxy

• Question 575:

  What must be used to share data between multiple security products?

  A. Cisco Rapid Threat Containment

  B. Cisco Platform Exchange Grid

  C. Cisco Advanced Malware Protection

  D. Cisco Stealthwatch Cloud

  Correct Answer: B

• Question 576:

  What is the primary benefit of deploying an ESA in hybrid mode?

  A. You can fine-tune its settings to provide the optimum balance between security and performance for your environment

  B. It provides the lowest total cost of ownership by reducing the need for physical appliances

  C. It provides maximum protection and control of outbound messages

  D. It provides email security while supporting the transition to the cloud

  Correct Answer: D

  Cisco Hybrid Email Security is a unique service offering that facilitates the deployment of your email securityinfrastructure both on premises and in the cloud. You can change the number of on-premises versus cloudusers at any time throughout the term of your contract, assuming the total number of users does not change.This allows for deployment flexibility as your organization's needs change.

• Question 577:

  Which CLI command is used to register a Cisco FirePower sensor to Firepower Management Center?

  A. configure system add

  B. configure manager add host

  C. configure manager delete

  D. configure manager add

  Correct Answer: D

• Question 578:

  When using Cisco AMP for Networks which feature copies a file to the Cisco AMP cloud for analysis?

  A. Spero analysis

  B. dynamic analysis

  C. sandbox analysis

  D. malware analysis

  Correct Answer: B

  Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc- config-guidev60/Reference_a_wrapper_Chapter_topic_here.html -> Spero analysis only uploads the signature of the (executable) files to the AMP cloud. It does not upload thewhole file. Dynamic analysis sends files to AMP ThreatGrid.Dynamic Analysis submits (the whole) files to Cisco Threat Grid (formerly AMP Threat Grid). Cisco ThreatGrid runs the file in a sandbox environment, analyzes the file's behavior to determine whether the file ismalicious, and returns a threat score that indicates the likelihood that a file contains malware. From the threatscore, you can view a dynamic analysis summary report with the reasons for the assigned threat score. Youcan also look in Cisco Threat Grid to view detailed reports for files that your organization submitted, as well asscrubbed reports with limited data for files that your organization did not submit.Local malware analysis allows a managed device to locally inspect executables, PDFs, office documents, andother types of files for the most common types of malware, using a detection rule set provided by the CiscoTalos Security Intelligence and Research Group (Talos). Because local analysis does not query the AMP cloud,and does not run the file, local malware analysis saves time and system resources. -> Malware analysis doesnot upload files to anywhere, it only checks the files locally.There is no sandbox analysis feature, it is just a method of dynamic analysis that runs suspicious files in avirtual machine.

• Question 579:

  Which technology reduces data loss by identifying sensitive information stored in public computing environments?

  A. Cisco SDA

  B. Cisco Firepower

  C. Cisco HyperFlex

  D. Cisco Cloudlock

  Correct Answer: D

  https://www.cisco.com/c/dam/en/us/products/collateral/security/cloudlock/cisco-cloudlock-cloud-data-security-datasheet.pdf

• Question 580:

  Which two features are used to configure Cisco ESA with a multilayer approach to fight viruses and malware? (Choose two)

  A. Sophos engine

  B. white list

  C. RAT

  D. outbreak filters

  E. DLP

  Correct Answer: AD