Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 621:

  Which feature requires a network discovery policy on the Cisco Firepower Next Generation Intrusion Prevention System?

  A. Security Intelligence
  B. Impact Flags
  C. Health Monitoring
  D. URL Filtering
  B. Impact Flags

  ---

  Explanation

  https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2019/pdf/BRKSEC-3300.pdf

• Question 622:

  What are two Trojan malware attacks? (Choose two)

  A. Frontdoor
  B. Rootkit
  C. Smurf
  D. Backdoor
  E. Sync
  B. Rootkit
  D. Backdoor

  ---

  Explanation

• Question 623:

  Which firewall mode does a Cisco Adaptive Security Appliance use to inspect Layer 2 traffic?

  A. Routed
  B. Passive
  C. Inline
  D. Transparent
  D. Transparent

  ---

  Explanation

• Question 624:

  What is a difference between weak passwords and missing encryption?

  A. Weak passwords allow programs to be renamed, and missing encryption hides .exe extensions.
  B. Weak passwords cause programs to crash, and missing encryption sends data to a memory location.
  C. Weak passwords consume bandwidth, and missing encryption allows user information to be hijacked.
  D. Weak passwords are guessed easily, and missing encryption allows information to be decrypted.
  D. Weak passwords are guessed easily, and missing encryption allows information to be decrypted.

  ---

  Explanation

• Question 625:

  DRAG DROP

  Drag and drop the Cisco CWS redirection options from the left onto the capabilities on the right.

  Select and Place:

  

  

• Question 626:

  Which two behavioral patterns characterize a ping of death attack? (Choose two)

  A. The attack is fragmented into groups of 16 octets before transmission.
  B. The attack is fragmented into groups of 8 octets before transmission.
  C. Short synchronized bursts of traffic are used to disrupt TCP connections.
  D. Malformed packets are used to crash systems.
  E. Publicly accessible DNS servers are typically used to execute the attack.
  B. The attack is fragmented into groups of 8 octets before transmission.
  D. Malformed packets are used to crash systems.

  ---

  Explanation

  Ping of Death (PoD) is a type of Denial of Service (DoS) attack in which an attacker attempts to crash,destabilize, or freeze the targeted computer or service by sending malformed or oversized packets using a simple ping command.A correctly- formed ping packet is typically 56 bytes in size, or 64 bytes when the ICMP header is considered,and 84 including Internet Protocol version 4 header. However, any IPv4 packet (including pings) may be as large as 65,535 bytes. Some computer systems were never designed to properly handle a ping packet larger than the maximum packet size because it violates the Internet Protocol documentedLike other large but well-formed packets, a ping of death is fragmented into groups of 8 octets beforetransmission. However, when the target computer reassembles the malformed packet, a buffer overflow can occur, causing a system crash and potentially allowing the injection of malicious code.

• Question 627:

  DRAG DROP

  Drag and drop the security responsibilities from the left onto the corresponding cloud service models on the right.

  Select and Place:

  

  

• Question 628:

  Refer to the exhibit.

  

  Which configuration item makes it possible to have the AAA session on the network?

  A. aaa authentication login console ise
  B. aaa authentication enable default enable
  C. aaa authorization network default group ise
  D. aaa authorization exec default ise
  C. aaa authorization network default group ise

  ---

  Explanation

• Question 629:

  Which Cisco WSA feature supports access control using URL categories?

  A. transparent user identification
  B. SOCKS proxy services
  C. web usage controls
  D. user session restrictions
  C. web usage controls

  ---

  Explanation

• Question 630:

  An engineer is onboarding a teleworker to Cisco Umbrella. After the worker's home network identity is configured, which additional action must be taken to complete the network registration?

  A. Change the public IP addresses from static to dynamic.
  B. Point the home modem DHCP to Cisco Umbrella DHCP.
  C. Set up a point-to-point VPN with the head-office.
  D. Point the home modem DNS to Cisco Umbrella DNS.
  D. Point the home modem DNS to Cisco Umbrella DNS.

  ---

  Explanation