350-701 Exam Details

  • Exam Code
    :350-701
  • Exam Name
    :Implementing and Operating Cisco Security Core Technologies (SCOR)
  • Certification
    :CCIE Security
  • Vendor
    :Cisco
  • Total Questions
    :784 Q&As
  • Last Updated
    :Jul 10, 2026

Cisco 350-701 Online Questions & Answers

  • Question 61:

    Refer to the exhibit.

    What will occur when this device tries to connect to the port?

    A. 802.1X will not work, but MAB will start and allow the device on the network.
    B. 802.1X will not work and the device will not be allowed network access
    C. 802.1X will work and the device will be allowed on the network
    D. 802.1X and MAB will both be used and ISE can use policy to determine the access level

  • Question 62:

    What is a benefit of using Cisco Umbrella?

    A. DNS queries are resolved faster.
    B. Attacks can be mitigated before the application connection occurs.
    C. Files are scanned for viruses before they are allowed to run.
    D. It prevents malicious inbound traffic.

  • Question 63:

    Which Cisco platform provides an agentless solution to provide visibility across the network including encrypted traffic analytics to detect malware in encrypted traffic without the need for decryption?

    A. Cisco Secure Network Analytics
    B. Cisco ISE
    C. Cisco AMP
    D. Cisco Secure Client

  • Question 64:

    Which security product enables administrators to deploy Kubernetes clusters in air-gapped sites without needing Internet access?

    A. Cisco Content Platform
    B. Cisco Container Controller
    C. Cisco Container Platform
    D. Cisco Cloud Platform

  • Question 65:

    An engineer adds a custom detection policy to a Cisco AMP deployment and encounters issues with the configuration. The simple detection mechanism is configured, but the dashboard indicates that the hash is not 64 characters and is non- zero. What is the issue?

    A. The engineer is attempting to upload a hash created using MD5 instead of SHA-256
    B. The file being uploaded is incompatible with simple detections and must use advanced detections
    C. The hash being uploaded is part of a set in an incorrect format
    D. The engineer is attempting to upload a file instead of a hash

  • Question 66:

    What is the intent of a basic SYN flood attack?

    A. to solicit DNS responses
    B. to exceed the threshold limit of the connection queue
    C. to flush the register stack to re-initiate the buffers
    D. to cause the buffer to overflow

  • Question 67:

    Which type of attack is social engineering?

    A. trojan
    B. phishing
    C. malware
    D. MITM

  • Question 68:

    What must be configured on Cisco Secure Endpoint to create a custom detection tile list to detect and quarantine future files?

    A. Use the simple custom detection feature and add each detection to the list.
    B. Add a network IP block allowed list to the configuration and add the blocked files.
    C. Create an advanced custom detection and upload the hash of each file
    D. Configure an application control allowed applications list to block the files

  • Question 69:

    A network engineer has entered the snmp-server user andy myv3 auth sha cisco priv aes 256 cisc0383320506 command and needs to send SNMP information to a host at 10.255.254.1. Which command achieves this goal?

    A. snmp-server host inside 10.255.254.1 version 3 andy
    B. snmp-server host inside 10.255.254.1 version 3 myv3
    C. snmp-server host inside 10.255.254.1 snmpv3 andy
    D. snmp-server host inside 10.255.254.1 snmpv3 myv3

  • Question 70:

    A network engineer must monitor user and device behavior within the on-premises network. This data must be sent to the Cisco Stealthwatch Cloud analytics platform for analysis. What must be done to meet this requirement using the Ubuntu-based VM appliance deployed in a VMware-based hypervisor?

    A. Configure a Cisco FMC to send syslogs to Cisco Stealthwatch Cloud
    B. Deploy the Cisco Stealthwatch Cloud PNM sensor that sends data to Cisco Stealthwatch Cloud
    C. Deploy a Cisco FTD sensor to send network events to Cisco Stealthwatch Cloud
    D. Configure a Cisco FMC to send NetFlow to Cisco Stealthwatch Cloud

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Cisco exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 350-701 exam preparations and Cisco certification application, do not hesitate to visit our Vcedump.com to find your solutions here.