Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 671:

  Which threat involves software being used to gain unauthorized access to a computer system?

  A. virus
  B. NTP amplification
  C. ping of death
  D. HTTP flood
  A. virus

  ---

  Explanation

• Question 672:

  How does a WCCP-configured router identify if the Cisco WSA is functional?

  A. If an ICMP ping fails three consecutive times between a router and the WSA, traffic is no longer transmitted to the router.
  B. If an ICMP ping fails three consecutive times between a router and the WSA, traffic is no longer transmitted to the WSA.
  C. The WSA sends a Here-l-Am message every 10 seconds, and the router acknowledges with an I-See-You message.
  D. The router sends a Here-l-Am message every 10 seconds, and the WSA acknowledges with an I-See-You message.
  C. The WSA sends a Here-l-Am message every 10 seconds, and the router acknowledges with an I-See-You message.

  ---

  Explanation

• Question 673:

  How does a cloud access security broker function?

  A. It is an authentication broker to enable single sign-on and multi-factor authentication for a cloud solution
  B. lt integrates with other cloud solutions via APIs and monitors and creates incidents based on events from the cloud solution
  C. It acts as a security information and event management solution and receives syslog from other cloud solutions.
  D. It scans other cloud solutions being used within the network and identifies vulnerabilities
  B. lt integrates with other cloud solutions via APIs and monitors and creates incidents based on events from the cloud solution

  ---

  Explanation

  A Cloud Access Security Broker (CASB) is a security solution that integrates with cloud solutions such as Software as a Service (SaaS), Infrastructure as a Service (IaaS), and Platform as a Service (PaaS) via APIs. It monitors cloud usage and creates incidents based on events from the cloud solution. This allows organizations to gain visibility into and control over their cloud usage, helping to protect against security threats and ensure compliance with security policies and regulations. CASBs can perform a variety of security-related functions, including identity and access management, data loss prevention, threat protection, and compliance enforcement, among others. By acting as an intermediary between cloud solutions and the organization, CASBs help to bridge the gap between security and cloud adoption, allowing organizations to securely adopt and manage cloud services.

• Question 674:

  Which Cisco solution provides a comprehensive view of Internet domains. IP addresses, and autonomous systems to help pinpoint attackers and malicious infrastructures?

  A. Cisco Threat Indication Database
  B. Cisco Advanced Malware Investigate
  C. Cisco Umbrella Investigate
  D. Cisco Secure Workload Cloud
  C. Cisco Umbrella Investigate

  ---

  Explanation

  Cisco Umbrella Investigate provides a comprehensive view of Internet domains, IP addresses, and autonomous systems, offering a wealth of information about the infrastructure of the internet. It helps security analysts and threat investigators to pinpoint current and emerging threats by providing access to data from Cisco's global network, thereby enabling the identification of attackers and malicious infrastructures.

• Question 675:

  Which two request methods of REST API are valid on the Cisco ASA Platform? (Choose two)

  A. put
  B. options
  C. get
  D. push
  E. connect
  A. put
  C. get

  ---

  Explanation

  Available request methods are:

  GET - Retrieves data from the specified object.

  PUT - Adds the supplied information to the specified object; returns a 404 Resource Not Found error if the object does not exist.

  POST - Creates the object with the supplied information.

  DELETE - Deletes the specified object.

  PATCH - Applies partial modifications to the specified object.

  https://www.cisco.com/c/en/us/td/docs/security/asa/api/qsg-asa-api.html

• Question 676:

  A network administrator is configuring SNMPv3 on a new router. The users have already been created; however, an additional configuration is needed to facilitate access to the SNMP views.

  What must the administrator do to accomplish this?

  A. map SNMPv3 users to SNMP views
  B. set the password to be used for SNMPv3 authentication
  C. define the encryption algorithm to be used by SNMPv3
  D. specify the UDP port used by SNMP
  A. map SNMPv3 users to SNMP views

  ---

  Explanation

• Question 677:

  Which benefit is provided by ensuring that an endpoint is compliant with a posture policy configured in Cisco ISE?

  A. It allows the endpoint to authenticate with 802.1x or MAB.
  B. It verifies that the endpoint has the latest Microsoft security patches installed.
  C. It adds endpoints to identity groups dynamically.
  D. It allows CoA to be applied if the endpoint status is compliant.
  B. It verifies that the endpoint has the latest Microsoft security patches installed.

  ---

  Explanation

• Question 678:

  Which solution combines Cisco IOS and IOS XE components to enable administrators to recognize applications, collect and send network metrics to Cisco Prime and other third-party management tools, and prioritize application traffic?

  A. Cisco Security Intelligence
  B. Cisco Application Visibility and Control
  C. Cisco Model Driven Telemetry
  D. Cisco DNA Center
  B. Cisco Application Visibility and Control

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/ios/solutions_docs/avc/guide/avc-user- guide/avc_tech_overview.html

• Question 679:

  What are two Detection and Analytics Engines of Cognitive Threat Analytics? (Choose two)

  A. data exfiltration
  B. command and control communication
  C. intelligent proxy
  D. snort
  E. URL categorization
  A. data exfiltration
  B. command and control communication

  ---

  Explanation

  https://www.cisco.com/c/dam/en/us/products/collateral/security/cognitive-threat- analytics/at-aglance-c45-736555.pdf

• Question 680:

  Based on the NIST 800-145 guide, which cloud architecture may be owned, managed, and operated by one or more of the organizations in the community, a third party, or some combination of them, and it may exist on or off premises?

  A. hybrid cloud
  B. private cloud
  C. public cloud
  D. community cloud
  D. community cloud

  ---

  Explanation