Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 581:

  What is a function of the Layer 4 Traffic Monitor on a Cisco WSA?

  A. blocks traffic from URL categories that are known to contain malicious content
  B. decrypts SSL traffic to monitor for malicious content
  C. monitors suspicious traffic across all the TCP/UDP ports
  D. prevents data exfiltration by searching all the network traffic for specified sensitive information
  C. monitors suspicious traffic across all the TCP/UDP ports

  ---

  Explanation

• Question 582:

  A Cisco ESA administrator has been tasked with configuring the Cisco ESA to ensure there are no viruses before quarantined emails are delivered. In addition, delivery of mail from known bad mail servers must be prevented. Which two actions must be taken in order to meet these requirements? (Choose two)

  A. Use outbreak filters from SenderBase
  B. Enable a message tracking service
  C. Configure a recipient access table
  D. Deploy the Cisco ESA in the DMZ
  E. Scan quarantined emails using AntiVirus signatures
  A. Use outbreak filters from SenderBase
  E. Scan quarantined emails using AntiVirus signatures

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/security/esa/esa12- 0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_0100100. html-> Therefore Outbreak filters can be used to block emails from bad mail servers.Web servers and email gateways are generally located in the DMZ soNote: The recipient access table (RAT), not to be confused with remote-access Trojan (also RAT), is a Cisco ESA term that defines which recipients are accepted by a public listener.

• Question 583:

  Which two tasks are required when a decryption policy is implemented on a Cisco WSA? (Choose two.)

  A. Configure invalid certificate handling.
  B. Upload a root certificate and private key.
  C. Enable real-time revocation status checking.
  D. Enable HTTPS attack protection.
  E. Enable the HTTPS proxy.
  B. Upload a root certificate and private key.
  E. Enable the HTTPS proxy.

  ---

  Explanation

• Question 584:

  Which feature of Cisco ASA allows VPN users to be postured against Cisco ISE without requiring an inline posture node?

  A. RADIUS Change of Authorization
  B. device tracking
  C. DHCP snooping
  D. VLAN hopping
  A. RADIUS Change of Authorization

  ---

  Explanation

• Question 585:

  What is the ideal deployment mode to use when you need to manage separate security policies for multiple customers on a Cisco ASA device?

  A. spanned cluster mode
  B. IRB mode
  C. VRF mode
  D. multiple context mode
  D. multiple context mode

  ---

  Explanation

• Question 586:

  When a Cisco WSA checks a web request, what occurs if it is unable to match a user- defined policy?

  A. It blocks the request.
  B. It applies the global policy.
  C. It applies the next identification profile policy.
  D. It applies the advanced policy.
  B. It applies the global policy.

  ---

  Explanation

• Question 587:

  DRAG DROP

  Drag and drop the descriptions from the left onto the correct protocol versions on the right.

  Select and Place:

  

  

• Question 588:

  An engineer is trying to decide between using L2TP or GRE over IPsec for their site-to-site VPN implementation. What must be un solution?

  A. L2TP is an IP packet encapsulation protocol, and GRE over IPsec is a tunneling protocol.
  B. L2TP uses TCP port 47 and GRE over IPsec uses UDP port 1701.
  C. GRE over IPsec adds its own header, and L2TP does not.
  D. GRE over IPsec cannot be used as a standalone protocol, and L2TP can.
  A. L2TP is an IP packet encapsulation protocol, and GRE over IPsec is a tunneling protocol.

  ---

  Explanation

• Question 589:

  DRAG DROP

  Drag and drop the suspicious patterns for the Cisco Tetration platform from the left onto the correct definitions on the righ.

  Select and Place:

  

  

• Question 590:

  How is a cross-site scripting attack executed?

  A. Force a currently authenticated end user to execute unwanted actions on a web app
  B. Execute malicious client-side scripts injected to a client via a web app
  C. Inject a database query via the input data from the client to a web app
  D. Intercept communications between a client and a web server
  B. Execute malicious client-side scripts injected to a client via a web app

  ---

  Explanation