Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 641:

  A company is planning to deploy an application to a secure cloud environment. The solution must meet these requirements:

  1. A third-party must control the underlying cloud infrastructure.

  2. The company must control the deployed applications.

  3. A third-party must control networking components.

  Which cloud service model must be used?

  A. SaaS
  B. IaaS
  C. PaaS
  D. private cloud
  C. PaaS

  ---

  Explanation

• Question 642:

  Which ID store requires that a shadow user be created on Cisco ISE for the admin login to work?

  A. RSA SecureID
  B. Internal Database
  C. Active Directory
  D. LDAP
  A. RSA SecureID

  ---

  Explanation

• Question 643:

  Which solution is made from a collection of secure development practices and guidelines that developers must follow to build secure applications?

  A. AFL
  B. Fuzzing Framework
  C. Radamsa
  D. OWASP
  D. OWASP

  ---

  Explanation

• Question 644:

  Which two features of Cisco Email Security can protect your organization against email threats? (Choose two)

  A. Time-based one-time passwords
  B. Data loss prevention
  C. Heuristic-based filtering
  D. Geolocation-based filtering
  E. NetFlow
  B. Data loss prevention
  D. Geolocation-based filtering

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/security/esa/esa11- 0/user_guide_fs/b_ESA_Admin_Guide_11_0/b_ESA_Admin_Guide_chapter_00.html

• Question 645:

  What is the purpose of the Decrypt for Application Detection feature within the WSA Decryption options?

  A. It decrypts HTTPS application traffic for unauthenticated users.
  B. It alerts users when the WSA decrypts their traffic.
  C. It decrypts HTTPS application traffic for authenticated users.
  D. It provides enhanced HTTPS application detection for AsyncOS.
  D. It provides enhanced HTTPS application detection for AsyncOS.

  ---

  Explanation

• Question 646:

  Which two features are used to configure Cisco ESA with a multilayer approach to fight viruses and malware? (Choose two)

  A. Sophos engine
  B. white list
  C. RAT
  D. outbreak filters
  E. DLP
  A. Sophos engine
  D. outbreak filters

  ---

  Explanation

• Question 647:

  What is the definition of phishing?

  A. malicious email spoofing attack that targets a specific organization or individual
  B. impersonation of an authorized website to deceive users into entering their credentials
  C. any kind of unwanted, unsolicited digital communication that gets sent out in bulk
  D. sending fraudulent communications that appear to come from a reputable source
  D. sending fraudulent communications that appear to come from a reputable source

  ---

  Explanation

• Question 648:

  Which two descriptions of AES encryption are true? (Choose two)

  A. AES is less secure than 3DES.
  B. AES is more secure than 3DES.
  C. AES can use a 168-bit key for encryption.
  D. AES can use a 256-bit key for encryption.
  E. AES encrypts and decrypts a key three times in sequence.
  B. AES is more secure than 3DES.
  D. AES can use a 256-bit key for encryption.

  ---

  Explanation

  https://gpdb.docs.pivotal.io/43190/admin_guide/topics/ipsec.html

• Question 649:

  Which VPN technology can support a multivendor environment and secure traffic between sites?

  A. SSL VPN
  B. GET VPN
  C. FlexVPN
  D. DMVPN
  C. FlexVPN

  ---

  Explanation

  FlexVPN is an IKEv2-based VPN technology that provides several benefits beyond traditional site-to-site VPN implementations. FlexVPN is a standards-based solution that can interoperate with non-Cisco IKEv2implementations. Therefore FlexVPN can support a multivendor environment. All of the three VPN technologies support traffic between sites (site-to-site or spoke-to-spoke).

• Question 650:

  What is a benefit of flexible NetFlow records?

  A. They are used for security
  B. They are used for accounting
  C. They monitor a packet from Layer 2 to Layer 5
  D. They have customized traffic identification
  D. They have customized traffic identification

  ---

  Explanation

  https://confluence.netvizura.com/display/NVUG/Traditional+vs.+Flexible+NetFlow