Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 691:

  Which Cisco platform ensures that machines that connect to organizational networks have the recommended antivirus definitions and patches to help prevent an organizational malware outbreak?

  A. Cisco WiSM
  B. Cisco ESA
  C. Cisco ISE
  D. Cisco Prime Infrastructure
  C. Cisco ISE

  ---

  Explanation

  A posture policy is a collection of posture requirements, which are associated with one or more identity groups, and operating systems. We can configure ISE to check for the Windows patch at Work Centers > Posture > Posture Elements > Conditions > File.In this example, we are going to use the predefined file check to ensure that our Windows 10 clients have the critical security patch installed to prevent the Wanna Cry malware; and we can also configure ISE to update the client with this patch.

  

• Question 692:

  What is an advantage of the Cisco Umbrella roaming client?

  A. the ability to see all traffic without requiring TLS decryption
  B. visibility into IP-based threats by tunneling suspicious IP connections
  C. the ability to dynamically categorize traffic to previously uncategorized sites
  D. visibility into traffic that is destined to sites within the office environment
  B. visibility into IP-based threats by tunneling suspicious IP connections

  ---

  Explanation

  These clients protect users from connections to malicious destinations and command-and-control callbacks at the DNS and IP layers, no matter where the device connects to the internet.

  https://umbrella.cisco.com/blog/secure-remote-workers-with-the-cisco-umbrella-roaming-client#:~:text=By%20using%20the%20Umbrella%20roaming,devices%20with%20device%2Dlevel%20reporting.

• Question 693:

  An engineer needs to configure cloud logging on Cisco ASA with SAL integration. Which parameter must be considered for this configuration?

  A. Events can be viewed only from one regional cloud.
  B. All CSM versions are supported.
  C. Onboard Cisco ASA device to CDO is needed.
  D. Required storage size can be allocated dynamically.
  C. Onboard Cisco ASA device to CDO is needed.

  ---

  Explanation

• Question 694:

  Which platform uses Cyber Threat Intelligence as its main source of information?

  A. EPP
  B. EDR
  C. Cisco ASA
  D. Cisco Secure Endpoint
  D. Cisco Secure Endpoint

  ---

  Explanation

• Question 695:

  Why is it important to have a patching strategy for endpoints?

  A. to take advantage of new features released with patches
  B. so that functionality is increased on a faster scale when it is used
  C. so that known vulnerabilities are targeted and having a regular patch cycle reduces risks
  D. so that patching strategies can assist with disabling nonsecure protocols in applications
  C. so that known vulnerabilities are targeted and having a regular patch cycle reduces risks

  ---

  Explanation

• Question 696:

  An organization received a large amount of SPAM messages over a short time period. In order to take action on the messages, it must be determined how harmful the messages are and this needs to happen dynamically.

  What must be configured to accomplish this?

  A. Configure the Cisco WSA to modify policies based on the traffic seen
  B. Configure the Cisco ESA to receive real-time updates from Talos
  C. Configure the Cisco WSA to receive real-time updates from Talos
  D. Configure the Cisco ESA to modify policies based on the traffic seen
  B. Configure the Cisco ESA to receive real-time updates from Talos

  ---

  Explanation

  The Mail Policies menu is where almost all of the controls related to email filtering happens. All the security and content filtering policies are set here, so it's likely that, as an ESA administrator, the pages on this menu are where you are likely to spend most of your time.

  

• Question 697:

  When NetFlow is applied to an interface, which component creates the flow monitor cache that is used to collect traffic based on the key and nonkey fields in the configured record?

  A. records
  B. flow exporter
  C. flow sampler
  D. flow monitor
  D. flow monitor

  ---

  Explanation

• Question 698:

  Which type of API is being used when a controller within a software-defined network architecture dynamically makes configuration changes on switches within the network?

  A. westbound AP
  B. southbound API
  C. northbound API
  D. eastbound API
  B. southbound API

  ---

  Explanation

  ExplanationSouthbound APIs enable SDN controllers to dynamically make changes based on real-time demands andscalability needs.

  

• Question 699:

  A networking team must harden an organization's network from VLAN hopping attacks. The team disables Dynamic Trunking Protocol and puts any unused ports in an unused VLAN. A trunk port is used as a trunk link. What must the team configure next to harden the network against VLAN hopping attacks?

  A. dedicated VLAN ID for all trunk ports
  B. disable STP on the network devices
  C. DHCP snooping on all the switches
  D. enable port-based network access control
  A. dedicated VLAN ID for all trunk ports

  ---

  Explanation

• Question 700:

  An engineer must use Cisco Secure Firewall Management Center to send Cisco Secure Firewall Threat Defense events to the cloud. The engineer performed these actions already:

  1. FTD devices were added to FMC 2. FTD devices were assigned licenses

  Which action must be taken to complete Cisco Cloud Event Configuration?

  A. Register with Cisco Smart Licensing.
  B. Enable cloud event connector.
  C. Create a Cisco Cloud Region.
  D. Assign a Cloud Event License.
  B. Enable cloud event connector.

  ---

  Explanation