Cisco CCNP 350-701 Questions & Answers

• Question 61:

  An engineer has been tasked with implementing a solution that can be leveraged for securing the cloud users, data, and applications. There is a requirement to use the Cisco cloud native CASB and cloud cybersecurity platform. What should be used to meet these requirements?

  A. Cisco Umbrella

  B. Cisco Cloud Email Security

  C. Cisco NGFW

  D. Cisco Cloudlock

  Correct Answer: D

  Reference: https://www.cisco.com/c/dam/en/us/products/collateral/security/cloud-web- security/at-a-glance-c45- 738565.pdf

• Question 62:

  Which attack is preventable by Cisco ESA but not by the Cisco WSA?

  A. buffer overflow

  B. DoS

  C. SQL injection

  D. phishing

  Correct Answer: D

  Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa13- 5/user_guide/b_ESA_Admin_Guide_13-5/m_advanced_phishing_protection.html

• Question 63:

  A Cisco ESA administrator has been tasked with configuring the Cisco ESA to ensure there are no viruses before quarantined emails are delivered. In addition, delivery of mail from known bad mail servers must be prevented. Which two actions must be taken in order to meet these requirements? (Choose two)

  A. Use outbreak filters from SenderBase

  B. Enable a message tracking service

  C. Configure a recipient access table

  D. Deploy the Cisco ESA in the DMZ

  E. Scan quarantined emails using AntiVirus signatures

  Correct Answer: AE

  Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12- 0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_0100100. html-> Therefore Outbreak filters can be used to block emails from bad mail servers.Web servers and email gateways are generally located in the DMZ soNote: The recipient access table (RAT), not to be confused with remote-access Trojan (also RAT), is a Cisco ESA term that defines which recipients are accepted by a public listener.

• Question 64:

  What is a benefit of using Cisco FMC over Cisco ASDM?

  A. Cisco FMC uses Java while Cisco ASDM uses HTML5.

  B. Cisco FMC provides centralized management while Cisco ASDM does not.

  C. Cisco FMC supports pushing configurations to devices while Cisco ASDM does not.

  D. Cisco FMC supports all firewall products whereas Cisco ASDM only supports Cisco ASA devices

  Correct Answer: B

  Reference: https://www.cisco.com/c/en/us/products/collateral/security/firesight- management-center/datasheetc78-736775.html

• Question 65:

  Which two cryptographic algorithms are used with IPsec? (Choose two)

  A. AES-BAC

  B. AES-ABC

  C. HMAC-SHA1/SHA2

  D. Triple AMC-CBC

  E. AES-CBC

  Correct Answer: CE

  Cryptographic algorithms defined for use with IPsec include:+ HMAC-SHA1/SHA2 for integrity protection and authenticity.+ TripleDES- CBC for confidentiality+ AES-CBC and AES-CTR for confidentiality.+ AES-GCM and ChaCha20-Poly1305 providing confidentiality and authentication together efficiently.

• Question 66:

  What is an attribute of the DevSecOps process?

  A. mandated security controls and check lists

  B. security scanning and theoretical vulnerabilities

  C. development security

  D. isolated security team

  Correct Answer: C

  DevSecOps (development, security, and operations) is a concept used in recent years to describe how to movesecurity activities to the start of the development life cycle and have built-in security practices in the continuousintegration/ continuous deployment (CI/CD) pipeline. Thus minimizing vulnerabilities and bringing security closerto IT and business objectives.Three key things make a real DevSecOps environment:+ Security testing is done by the development team.+ Issues found during that testing is managed by the development team.+ Fixing those issues stays within the development team.

• Question 67:

  What are two characteristics of Cisco DNA Center APIs? (Choose two)

  A. Postman is required to utilize Cisco DNA Center API calls.

  B. They do not support Python scripts.

  C. They are Cisco proprietary.

  D. They quickly provision new devices.

  E. They view the overall health of the network

  Correct Answer: DE

  -Use the Know Your Network REST methods to GET information about clients, sites, topology, devices, and issues: Retrieve network health information and site and network physical, Layer 2, Layer 3, and VLAN information. -Configuration Templates with the Template Programmer/Editior is a centralized CLI-management tool that facilitates design and provisioning of workflows in Cisco DNA Center. https://developer.cisco.com/docs/dna-center/#!cisco-dna-center-platform-overview/intent-api-northbound

  Postman is not required: Python, SDK and postman can be used. https://robertcsapo.medium.com/3-simple-ways-to-use-cisco-dna-center-platform-apis-7eee49b76287 These APIs can be open or proprietary. https://www.ciscopress.com/articles/article.asp?p=3004581andseqNum=2

• Question 68:

  An organization has a Cisco Stealthwatch Cloud deployment in their environment. Cloud logging is working as expected, but logs are not being received from the on-premise network, what action will resolve this issue?

  A. Configure security appliances to send syslogs to Cisco Stealthwatch Cloud

  B. Configure security appliances to send NetFlow to Cisco Stealthwatch Cloud

  C. Deploy a Cisco FTD sensor to send events to Cisco Stealthwatch Cloud

  D. Deploy a Cisco Stealthwatch Cloud sensor on the network to send data to Cisco Stealthwatch Cloud

  Correct Answer: D

  Reference: CCNP And CCIE Security Core SCOR 350-701 Official Cert Guide

• Question 69:

  A switch with Dynamic ARP Inspection enabled has received a spoofed ARP response on a trusted interface. How does the switch behave in this situation?

  A. It forwards the packet after validation by using the MAC Binding Table.

  B. It drops the packet after validation by using the IP and MAC Binding Table.

  C. It forwards the packet without validation.

  D. It drops the packet without validation.

  Correct Answer: C

• Question 70:

  Which term describes when the Cisco Firepower downloads threat intelligence updates from Cisco Talos?

  A. consumption

  B. sharing

  C. analysis

  D. authoring

  Correct Answer: A

  we will showcase Cisco Threat Intelligence Director (CTID) an exciting feature on Cisco's FirepowerManagement Center (FMC) product offering that automates the operationalization of threat intelligence. TID has the ability to consume threat intelligence via STIX over TAXII and allows uploads/downloads of STIX and simple blacklists. Reference: https://blogs.cisco.com/developer/automate-threat- intelligence-using-cisco-threat-intelligencedirector