Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 651:

  A company has 5000 Windows users on its campus. Which two precautions should IT take to prevent WannaCry ransomware from spreading to all clients? (Choose two.)

  A. Segment different departments to different IP blocks and enable Dynamic ARP inspection on all VLANs
  B. Ensure that noncompliant endpoints are segmented off to contain any potential damage.
  C. Ensure that a user cannot enter the network of another department.
  D. Perform a posture check to allow only network access to those Windows devices that are already patched.
  E. Put all company users in the trusted segment of NGFW and put all servers to the DMZ segment of the Cisco NGFW.
  B. Ensure that noncompliant endpoints are segmented off to contain any potential damage.
  D. Perform a posture check to allow only network access to those Windows devices that are already patched.

  ---

  Explanation

• Question 652:

  Which two deployment modes does the Cisco ASA FirePower module support? (Choose two)

  A. transparent mode
  B. routed mode
  C. inline mode
  D. active mode
  E. passive monitor-only mode
  A. transparent mode
  B. routed mode

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/security/asa/asa92/asdm72/firewall/asa- firewall-asdm/modules-sfr.html

• Question 653:

  What is the most common type of data exfiltration that organizations currently experience?

  A. HTTPS file upload site
  B. Microsoft Windows network shares
  C. SQL database injections
  D. encrypted SMTP
  B. Microsoft Windows network shares

  ---

  Explanation

• Question 654:

  An engineer is configuring Cisco Umbrella and has an identity that references two different policies. Which action ensures that the policy that the identity must use takes precedence over the second one?

  A. Configure the default policy to redirect the requests to the correct policy
  B. Place the policy with the most-specific configuration last in the policy order
  C. Configure only the policy with the most recently changed timestamp
  D. Make the correct policy first in the policy order
  D. Make the correct policy first in the policy order

  ---

  Explanation

• Question 655:

  Which CLI command is used to enable URL filtering support for shortened URLs on the Cisco ESA?

  A. webadvancedconfig
  B. websecurity advancedconfig
  C. outbreakconfig
  D. websecurity config
  B. websecurity advancedconfig

  ---

  Explanation

• Question 656:

  What is a difference between DMVPN and sVTI?

  A. DMVPN supports tunnel encryption, whereas sVTI does not.
  B. DMVPN supports dynamic tunnel establishment, whereas sVTI does not.
  C. DMVPN supports static tunnel establishment, whereas sVTI does not.
  D. DMVPN provides interoperability with other vendors, whereas sVTI does not.
  B. DMVPN supports dynamic tunnel establishment, whereas sVTI does not.

  ---

  Explanation

• Question 657:

  A network engineer must use the Cisco DNA Center API to create a configuration template to provision a device. Which two method and endpoint pairs must be used to create the template? (Choose two.)

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B
  D. Option D

  ---

  Explanation

• Question 658:

  DoS attacks are categorized as what?

  A. phishing attacks
  B. flood attacks
  C. virus attacks
  D. trojan attacks
  B. flood attacks

  ---

  Explanation

• Question 659:

  Which process is used to obtain a certificate from a CA?

  A. enrollment
  B. registration
  C. approval
  D. signing
  A. enrollment

  ---

  Explanation

• Question 660:

  DRAG DROP

  Drag and drop the Cisco Secure Email Gateway benefits from the left to the corresponding deployment options on the right.

  Select and Place: