Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 701:

  Which two types of connectors are used to generate telemetry data from IPFIX records in a Cisco Secure Workload implementation? (Choose two.)

  A. ADC
  B. ERSPAN
  C. Cisco ASA
  D. NetFlow
  E. Cisco Secure Workload
  D. NetFlow
  E. Cisco Secure Workload

  ---

  Explanation

  In a Cisco Secure Workload implementation, telemetry data can be generated from IPFIX (Internet Protocol Flow Information Export) records using NetFlow connectors and Cisco Secure Workload itself. NetFlow provides insights into network traffic flow and volume, while Cisco Secure Workload uses this data for visibility, segmentation, and security analytics within the data center.

• Question 702:

  When planning a VPN deployment, for which reason does an engineer opt for an active/active FlexVPN configuration as opposed to DMVPN?

  A. Multiple routers or VRFs are required.
  B. Traffic is distributed statically by default.
  C. Floating static routes are required.
  D. HSRP is used for faliover.
  B. Traffic is distributed statically by default.

  ---

  Explanation

• Question 703:

  After deploying a Cisco ESA on your network, you notice that some messages fail to reach their destinations.

  Which task can you perform to determine where each message was lost?

  A. Configure the trackingconfig command to enable message tracking.
  B. Generate a system report.
  C. Review the log files.
  D. Perform a trace.
  A. Configure the trackingconfig command to enable message tracking.

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/security/esa/esa12- 0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_011110.ht ml

• Question 704:

  What is a difference between GETVPN and IPsec?

  A. GETVPN reduces latency and provides encryption over MPLS without the use of a central hub
  B. GETVPN provides key management and security association management
  C. GETVPN is based on IKEv2 and does not support IKEv1
  D. GETVPN is used to build a VPN network with multiple sites without having to statically configure all devices
  A. GETVPN reduces latency and provides encryption over MPLS without the use of a central hub

  ---

  Explanation

  GETVPN Simplifies branch-to-branch instantaneous communications - Ensures low latency and jitter by enabling full-time, direct communications between sites, without requiring transport through a central hub

  Maximizes security - Provides encryption for MPLS networks while maintaining network intelligence such as full-mesh connectivity, natural routing path, and quality of service (QoS)

  Complies with governmental regulation and privacy laws - Helps you meet security compliance and internal regulation by encrypting all WAN traffic

  Offers management flexibility - Eliminates complex peer-to-peer key management with group encryption keys

• Question 705:

  An engineer must deploy Cisco Secure Email with Cloud URL Analysis and must meet these requirements:

  1. To protect the network from large-scale virus outbreaks 2. To protect the network from non-viral attacks such as phishing scams and malware distribution 3. To provide active analysis of the structure of the URL and information about the domain and page contents

  Which two prerequisites must the engineer ensure are configured? (Choose two.)

  A. Scanning enabled for each Verdict, Prepend Subject and Deliver.
  B. Outbreak Filters must be enabled globally.
  C. Enable TLS by setting to Preferred to the Default Domain.
  D. Service Logs must be enabled.
  E. Enable Rejected Connection Logging.
  A. Scanning enabled for each Verdict, Prepend Subject and Deliver.
  B. Outbreak Filters must be enabled globally.

  ---

  Explanation

• Question 706:

  What is the term for when an endpoint is associated to a provisioning WLAN that is shared with guest access, and the same guest portal is used as the BYOD portal?

  A. single-SSID BYOD
  B. multichannel GUI
  C. dual-SSID BYOD
  D. streamlined access
  C. dual-SSID BYOD

  ---

  Explanation

• Question 707:

  Which action configures the IEEE 802.1X Flexible Authentication feature lo support Layer 3 authentication mechanisms?

  A. Identity the devices using this feature and create a policy that allows them to pass Layer 2 authentication.
  B. Configure WebAuth so the hosts are redirected to a web page for authentication.
  C. Modify the Dot1x configuration on the VPN server lo send Layer 3 authentications to an external authentication database
  D. Add MAB into the switch to allow redirection to a Layer 3 device for authentication.
  D. Add MAB into the switch to allow redirection to a Layer 3 device for authentication.

  ---

  Explanation

  Configuring the IEEE 802.1X Flexible Authentication feature to support Layer 3 authentication mechanisms involves adding MAC Authentication Bypass (MAB) into the switch configuration. This allows devices that do not support 802.1X to be authenticated using their MAC address. Once MAB identifies the device, it can then be redirected to a Layer 3 device for further authentication, thus providing a mechanism to support devices requiring Layer 3 authentication methods.

• Question 708:

  Which CoA response code is sent if an authorization state is changed successfully on a Cisco IOS device?

  A. CoA-NCL
  B. CoA-NAK
  C. CoA-MAB
  D. CoA-ACK
  D. CoA-ACK

  ---

  Explanation

• Question 709:

  An administrator configures a new destination list in Cisco Umbrella so that the organization can block specific domains for its devices. What should be done to ensure that all subdomains of domain.com are blocked?

  A. Configure the *.com address in the block list.
  B. Configure the *.domain.com address in the block list
  C. Configure the *.domain.com address in the block list
  D. Configure the domain.com address in the block list
  D. Configure the domain.com address in the block list

  ---

  Explanation

• Question 710:

  Refer to the exhibit. Which protocol should be used to encrypt a client connection that signs in to the router remotely to make common configuration changes?

  

  A. SSH
  B. FTPS
  C. SCP
  D. SFTP
  A. SSH

  ---

  Explanation