Cisco CCNP 350-701 Questions & Answers

• Question 51:

  Which two solutions help combat social engineering and phishing at the endpoint level? (Choose two.)

  A. Cisco Umbrella

  B. Cisco ISE

  C. Cisco DNA Center

  D. Cisco TrustSec

  E. Cisco Duo Security

  Correct Answer: AE

• Question 52:

  DoS attacks are categorized as what?

  A. phishing attacks

  B. flood attacks

  C. virus attacks

  D. trojan attacks

  Correct Answer: B

• Question 53:

  What is a benefit of using a multifactor authentication strategy?

  A. It provides visibility into devices to establish device trust.

  B. It provides secure remote access for applications.

  C. It provides an easy, single sign-on experience against multiple applications

  D. lt protects data by enabling the use of a second validation of identity.

  Correct Answer: D

• Question 54:

  Which feature is leveraged by advanced antimalware capabilities to be an effective endpomt protection platform?

  A. big data

  B. storm centers

  C. sandboxing

  D. blocklisting

  Correct Answer: C

• Question 55:

  Cisco SensorBase gaihers threat information from a variety of Cisco products and services and performs analytics to find patterns on threats. Which term describes this process?

  A. deployment

  B. consumption

  C. authoring

  D. sharing

  Correct Answer: D

  "Sharing telemetry data with the SensorBase Network to improve visibility of alerts and sensor actions on a global scale"

  https://www.cisco.com/c/en/us/td/docs/security/security_management/cisco_security_manager/security_manager/419/user/guide/CSMUserGuide/ipsglobe.html

  "Participating in the Cisco SensorBase Network means that Cisco collects data and shares that information with the SensorBase threat management database. This data includes information about request attributes and how the appliance handles requests."

  https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa_14-1/User-Guide/b_WSA_UserGuide_14_01/b_WSA_UserGuide_11_7_chapter_00.html

• Question 56:

  An administrator needs to configure the Cisco ASA via ASDM such that the network management system can actively monitor the host using SNMPv3. Which two tasks must be performed for this configuration? (Choose two.)

  A. Specify the SNMP manager and UDP port.

  B. Specify an SNMP user group

  C. Specify a community string.

  D. Add an SNMP USM entry

  E. Add an SNMP host access entry

  Correct Answer: BD

• Question 57:

  What is the difference between Cross-site Scripting and SQL Injection, attacks?

  A. Cross-site Scripting is an attack where code is injected into a database, whereas SQL Injection is an attack where code is injected into a browser.

  B. Cross-site Scripting is a brute force attack targeting remote sites, whereas SQL Injection is a social engineering attack.

  C. Cross-site Scripting is when executives in a corporation are attacked, whereas SQL Injection is when a database is manipulated.

  D. Cross-site Scripting is an attack where code is executed from the server side, whereas SQL Injection is an attack where code is executed from the client side.

  Correct Answer: D

• Question 58:

  Using Cisco Firepower's Security Intelligence policies, upon which two criteria is Firepower block based? (Choose two)

  A. URLs

  B. protocol IDs

  C. IP addresses

  D. MAC addresses

  E. port numbers

  Correct Answer: AC

  Reference:

  https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc- configguide-v623/security_intelligence_blacklisting.html

• Question 59:

  Which cryptographic process provides origin confidentiality, integrity, and origin authentication for packets?

  A. IKEv1

  B. AH

  C. ESP

  D. IKEv2

  Correct Answer: C

• Question 60:

  An organization wants to secure users, data, and applications in the cloud. The solution must be API-based and operate as a cloud-native CASB. Which solution must be used for this implementation?

  A. Cisco Cloudlock

  B. Cisco Cloud Email Security

  C. Cisco Firepower Next-Generation Firewall

  D. Cisco Umbrella

  Correct Answer: A

  Reference: https://www.cisco.com/c/dam/en/us/products/collateral/security/cloud-web- security/at-a-glance-c45-738565.pdf