Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 601:

  What does Cisco ISE use to collect endpoint attributes that are used in profiling?

  A. probes
  B. posture assessment
  C. Cisco AnyConnect Secure Mobility Client
  D. Cisco pxGrid
  A. probes

  ---

  Explanation

  https://content.cisco.com/chapter.sjs?uri=/searchable/chapter/content/en/us/td/docs/security/ise/2-6/ admin_guide/b_ise_admin_guide_26/ b_ise_admin_guide_26_chapter_010100.html.xml#:~:text=Network %20probe%20is%20a% 20method,in%20the%20Cisco%20ISE%20database

• Question 602:

  Which two endpoint measures are used to minimize the chances of falling victim to phishing and social engineering attacks? (Choose two)

  A. Patch for cross-site scripting.
  B. Perform backups to the private cloud.
  C. Protect against input validation and character escapes in the endpoint.
  D. Install a spam and virus email filter.
  E. Protect systems with an up-to-date antimalware program
  D. Install a spam and virus email filter.
  E. Protect systems with an up-to-date antimalware program

  ---

  Explanation

  Phishing attacks are the practice of sending fraudulent communications that appear to come from a reputablesource. It is usually done through email. The goal is to steal sensitive data like credit card and login information,or to install malware on the victim's machine.

• Question 603:

  Which VMware platform does Cisco ACI integrate with to provide enhanced visibility, provide policy integration and deployment, and implement security policies with access lists?

  A. VMware APIC
  B. VMware vRealize
  C. VMware fusion
  D. VMware horizons
  B. VMware vRealize

  ---

  Explanation

• Question 604:

  In which scenario is endpoint-based security the solution?

  A. inspecting encrypted traffic
  B. device profiling and authorization
  C. performing signature-based application control
  D. inspecting a password-protected archive
  C. performing signature-based application control

  ---

  Explanation

• Question 605:

  

  Refer to the exhibit. What function does the API key perform while working with https://api.amp.cisco.com/v1/computers?

  A. imports requests
  B. HTTP authorization
  C. HTTP authentication
  D. plays dent ID
  C. HTTP authentication

  ---

  Explanation

  https://www.cisco.com/c/en/us/support/docs/security/amp-endpoints/201121-Overview-of-the-Cisco-AMP-for-Endpoints.html

• Question 606:

  Which two actions does the Cisco identity Services Engine posture module provide that ensures endpoint security?(Choose two.)

  A. The latest antivirus updates are applied before access is allowed.
  B. Assignments to endpoint groups are made dynamically, based on endpoint attributes.
  C. Patch management remediation is performed.
  D. A centralized management solution is deployed.
  E. Endpoint supplicant configuration is deployed.
  A. The latest antivirus updates are applied before access is allowed.
  C. Patch management remediation is performed.

  ---

  Explanation

  The latest antivirus updates are applied before access is allowed.

  The Cisco ISE posture module can assess whether antivirus software is present and up to date on the endpoint. If it's outdated, access can be restricted or remediation triggered.

  Patch management remediation is performed.

  The posture module can check for missing patches and trigger remediation workflows to ensure the endpoint meets security requirements before granting full network access.

• Question 607:

  Which feature is used to restrict communication between interfaces on a Cisco ASA?

  A. VLAN subinterfaces
  B. traffic zones
  C. VxLAN interfaces
  D. security levels
  D. security levels

  ---

  Explanation

• Question 608:

  What is offered by an EPP solution but not an EDR solution?

  A. investigation
  B. containment
  C. sandboxing
  D. detection
  C. sandboxing

  ---

  Explanation

• Question 609:

  What is a difference between a DoS attack and a DDoS attack?

  A. A DoS attack is where a computer is used to flood a server with TCP and UDP packets whereas a DDoS attack is where multiple systems target a single system with a DoS attack
  B. A DoS attack is where a computer is used to flood a server with TCP and UDP packets whereas a DDoS attack is where a computer is used to flood multiple servers that are distributed over a LAN
  C. A DoS attack is where a computer is used to flood a server with UDP packets whereas a DDoS attack is where a computer is used to flood a server with TCP packets
  D. A DoS attack is where a computer is used to flood a server with TCP packets whereas a DDoS attack is where a computer is used to flood a server with UDP packets
  A. A DoS attack is where a computer is used to flood a server with TCP and UDP packets whereas a DDoS attack is where multiple systems target a single system with a DoS attack

  ---

  Explanation

  A Denial of Service (DoS) attack is a type of cyber attack in which a single system floods a server with a large number of packets, overwhelming the server and causing it to become unavailable to legitimate users. The goal of a DoS attack is to prevent legitimate users from accessing the targeted server by consuming its resources or causing it to crash.

  A Distributed Denial of Service (DDoS) attack is a more sophisticated form of a DoS attack. In a DDoS attack, multiple systems, often compromised through malware, are used to flood a single server with packets, overwhelming it and making it unavailable to legitimate users. The goal of a DDoS attack is the same as a DoS attack, but the scale of the attack is much larger and the resources used to launch the attack are distributed across multiple systems. This makes DDoS attacks much harder to detect and mitigate.

• Question 610:

  Which telemetry data captures variations seen within the flow, such as the packets TTL, IP/TCP flags, and payload length?

  A. interpacket variation
  B. software package variation
  C. flow insight variation
  D. process details variation
  A. interpacket variation

  ---

  Explanation

  https://www.cisco.com/c/dam/global/en_uk/products/switches/cisco_nexus_9300_ex_platfo rm_switches_white_paper_uki.pdf