Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 661:

  Which interface mode does a Cisco Secure IPS device use to block suspicious traffic?

  A. Passive
  B. Inline
  C. Promiscuous
  D. Active
  B. Inline

  ---

  Explanation

• Question 662:

  Which solution detects threats across a private network, public clouds, and encrypted traffic?

  A. Cisco Stealthwatch
  B. Cisco CTA
  C. Cisco Encrypted Traffic Analytics
  D. Cisco Umbrella
  A. Cisco Stealthwatch

  ---

  Explanation

• Question 663:

  Which action adds IOCs to customize detections for a new attack?

  A. Use the initiate Endpoint 1OC scan feature to gather the IOC information and push it to clients.
  B. Upload the 10Cs into the Installed Endpoint IOC feature within Cisco Secure Endpoint.
  C. Add a custom advanced detection to include the 1OCs needed within Cisco Secure Endpoint.
  D. Modify the base policy within Cisco Secure Endpoint to include simple custom detections.
  B. Upload the 10Cs into the Installed Endpoint IOC feature within Cisco Secure Endpoint.

  ---

  Explanation

• Question 664:

  DRAG DROP

  A network engineer is configuring NetFlow top talkers on a Cisco router Drag and drop the steps in the process from the left into the sequence on the right

  Select and Place:

  

  

• Question 665:

  In which two ways does a system administrator send web traffic transparently to the Web Security Appliance? (Choose two)

  A. configure Active Directory Group Policies to push proxy settings
  B. configure policy-based routing on the network infrastructure
  C. reference a Proxy Auto Config file
  D. configure the proxy IP address in the web-browser settings
  E. use Web Cache Communication Protocol
  B. configure policy-based routing on the network infrastructure
  E. use Web Cache Communication Protocol

  ---

  Explanation

• Question 666:

  DRAG DROP

  Drag and drop the common security threats from the left onto the definitions on the right.

  Select and Place:

  

  

• Question 667:

  Which attack gives unauthorized access to files on the web server?

  A. DHCP snooping
  B. path traversal
  C. broadcast storm
  D. distributed DoS
  B. path traversal

  ---

  Explanation

• Question 668:

  Which compliance status is shown when a configured posture policy requirement is not met?

  A. compliant
  B. unknown
  C. authorized
  D. noncompliant
  D. noncompliant

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/security/ise/1- 3/admin_guide/b_ise_admin_guide_13/b_ise_admin_guide_sample_chapter_010111.html

• Question 669:

  What is a description of microsegmentation?

  A. Environments deploy a container orchestration platform, such as Kubernetes, to manage the application delivery.
  B. Environments apply a zero-trust model and specify how applications on different servers or containers can communicate.
  C. Environments deploy centrally managed host-based firewall rules on each server or container.
  D. Environments implement private VLAN segmentation to group servers with similar applications.
  B. Environments apply a zero-trust model and specify how applications on different servers or containers can communicate.

  ---

  Explanation

• Question 670:

  A network engineer must configure a Cisco ESA to prompt users to enter two forms of information before gaining access The Cisco ESA must also join a cluster machine using preshared keys. What must be configured to meet these requirements?

  A. Enable two-factor authentication through a RADIUS server and then join the cluster by using the Cisco ESA CLI.
  B. Enable two-factor authentication through a RADIUS server and then join the cluster by using the Cisco ESA GUI
  C. Enable two-factor authentication through a TACACS+ server and then join the cluster by using the Cisco ESA GUI.
  D. Enable two-factor authentication through a TACACS+ server and then join the cluster by using the Cisco ESA CLI
  A. Enable two-factor authentication through a RADIUS server and then join the cluster by using the Cisco ESA CLI.

  ---

  Explanation

  https://www.cisco.com/c/ja_jp/td/docs/security/esa/esa11-0/user_guide_fs/b_ESA_Admin_Guide_fs/b_ESA_Admin_Guide_fs_chapter_0101000.html