Cisco CCNP 350-701 Questions & Answers

• Question 601:

  What are two reasons for implementing a multifactor authentication solution such as Duo Security provide to an organization? (Choose two)

  A. flexibility of different methods of 2FA such as phone callbacks, SMS passcodes, and push notifications

  B. single sign-on access to on-premises and cloud applications

  C. integration with 802.1x security using native Microsoft Windows supplicant

  D. secure access to on-premises and cloud applications

  E. identification and correction of application vulnerabilities before allowing access to resources

  Correct Answer: AD

  Two-factor authentication adds a second layer of security to your online accounts. Verifying your identity using asecond factor (like your phone or other mobile device) prevents anyone but you from logging in, even if theyknow your password.Note: Single sign-on (SSO) is a property of identity and access management that enables users to securelyauthenticate with multiple applications and websites by logging in only once with just one set of credentials(username and password). With SSO, the application or website that the user is trying to access relies on atrusted third party to verify that users are who they say they are.

• Question 602:

  On which part of the IT environment does DevSecOps focus?

  A. application development

  B. wireless network

  C. data center

  D. perimeter network

  Correct Answer: A

• Question 603:

  Which two risks is a company vulnerable to if it does not have a well-established patching solution for endpoints? (Choose two)

  A. exploits

  B. ARP spoofing

  C. denial-of-service attacks

  D. malware

  E. eavesdropping

  Correct Answer: AD

  Malware means "malicious software", is any software intentionally designed to cause damage to a computer, server, client, or computer network. The most popular types of malware includes viruses, ransomware and spyware. Virus Possibly

  the most common type of malware, viruses attach their malicious code to clean code and wait to be run.

  Ransomware is malicious software that infects your computer and displays messages demanding a fee to be paid in order for your system to work again.Spyware is spying software that can secretly record everything you enter, upload,

  download, and store on your computers or mobile devices. Spyware always tries to keep itself hidden.An exploit is a code that takes advantage of a software vulnerability or security flaw.Exploits and malware are two risks for endpoints that

  are not up to date. ARP spoofing and eavesdropping are attacks against the network while denial-of-service attack is based on the flooding of IP packets.

• Question 604:

  What Cisco command shows you the status of an 802.1X connection on interface gi0/1?

  A. show authorization status

  B. show authen sess int gi0/1

  C. show connection status gi0/1

  D. show ver gi0/1

  Correct Answer: B

• Question 605:

  An engineer needs a solution for TACACS+ authentication and authorization for device administration.

  The engineer also wants to enhance wired and wireless network security by requiring users and endpoints to use 802.1X, MAB, or WebAuth. Which product meets all of these requirements?

  A. Cisco Prime Infrastructure

  B. Cisco Identity Services Engine

  C. Cisco Stealthwatch

  D. Cisco AMP for Endpoints

  Correct Answer: B

• Question 606:

  Which two capabilities does TAXII support? (Choose two)

  A. Exchange

  B. Pull messaging

  C. Binding

  D. Correlation

  E. Mitigating

  Correct Answer: AB

  https://docs.oasis-open.org/cti/taxii/v1.1.1/taxii-v1.1.1-part1-overview.html

  "There are three Capabilities that the current version of TAXII supports: push messaging, pull messaging, and discovery." "Discovery does, however, allow for the automated exchange of information..."

• Question 607:

  Elliptic curve cryptography is a stronger more efficient cryptography method meant to replace which current encryption technology?

  A. 3DES

  B. RSA

  C. DES

  D. AES

  Correct Answer: B

  Compared to RSA, the prevalent public-key cryptography of the Internet today, Elliptic Curve Cryptography (ECC) offers smaller key sizes, faster computation,as well as memory, energy and bandwidth savings and is thus better suited forsmall devices.

• Question 608:

  Which action controls the amount of URI text that is stored in Cisco WSA logs files?

  A. Configure the datasecurityconfig command

  B. Configure the advancedproxyconfig command with the HTTPS subcommand

  C. Configure a small log-entry size.

  D. Configure a maximum packet size.

  Correct Answer: B

• Question 609:

  An engineer wants to generate NetFlow records on traffic traversing the Cisco ASA. Which Cisco ASA command must be used?

  A. flow-export destination inside 1.1.1.1 2055

  B. B. ip flow monitor input

  C. ip flow-export destination 1.1.1.1 2055

  D. flow exporter

  Correct Answer: A

  Reference:

  https://www.cisco.com/c/en/us/td/docs/security/asa/asa84/configuration/guide/asa_84_cli_c onfig/monitor_nsel.html

• Question 610:

  In which form of attack is alternate encoding, such as hexadecimal representation, most often observed?

  A. Smurf

  B. distributed denial of service

  C. cross-site scripting

  D. rootkit exploit

  Correct Answer: C

  Cross site scripting (also known as XSS) occurs when a web application gathers malicious data from a user. The data is usually gathered in the form of a hyperlink which contains malicious content within it. The user will most likely click on

  this link from another website, instant message, or simply just reading a web board or email message.Usually the attacker will encode the malicious portion of the link to the site in HEX (or other encoding methods) so the request is less

  suspicious looking to the user when clicked on.For example the code below is written in hex:

  Click Hereis equivalent to:Click HereNote: In the format "and#xhhhh", hhhh is the code point in hexadecimal form.