Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 731:

  Which exfiltration method does an attacker use to hide and encode data inside DNS requests and queries?

  A. DNS tunneling
  B. DNSCrypt
  C. DNS security
  D. DNSSEC
  A. DNS tunneling

  ---

  Explanation

  DNS Tunneling is a method of cyber attack that encodes the data of other programs or protocols in DNSqueries and responses. DNS tunneling often includes data payloads that can be added to an attacked DNSserver and used to control a remote server and applications.

• Question 732:

  Which technology enables integration between Cisco ISE and other platforms to gather and share network and vulnerability data and SIEM and location information?

  A. pxGrid
  B. NetFlow
  C. SNMP
  D. Cisco Talos
  A. pxGrid

  ---

  Explanation

• Question 733:

  Which two methods are available in Cisco Secure Web Appliance to process client requests when configured in Transparent mode? (Choose two.)

  A. WCCP
  B. Browser settings
  C. WPAD
  D. PAC files
  E. PBR
  A. WCCP
  E. PBR

  ---

  Explanation

• Question 734:

  Which Cisco solution integrates industry-leading artificial intelligence and machine learning analytics and an assurance database to review the security posture and maintain visibility of an organizations cloud environment?

  A. Cisco Secure Workload
  B. Cisco CSR1000v
  C. Cisco DNA
  D. Cisco FTD
  A. Cisco Secure Workload

  ---

  Explanation

• Question 735:

  Which email security feature protects users from phishing attempts?

  A. anti-malware file scanning
  B. intrusion prevention
  C. reputation-based filtering
  D. malicious signature detection
  C. reputation-based filtering

  ---

  Explanation

• Question 736:

  Which protocol provides the strongest throughput performance when using Cisco AnyConnect VPN?

  A. TLSv1.2
  B. TLSv1.1
  C. BJTLSv1
  D. DTLSv1
  D. DTLSv1

  ---

  Explanation

  DTLS is used for delay sensitive applications (voice and video) as its UDP based while TLS is TCP based.Therefore DTLS offers strongest throughput performance. The throughput of DTLS at the time of AnyConnect connection can be expected to have processing performance close to VPN throughput.

• Question 737:

  A customer has various external HTTP resources available including Intranet. Extranet, and Internet, with a proxy configuration running in explicit mode. Which method allows the client desktop browsers to be configured to select when to connect direct or when to use the proxy?

  A. Transparent mode
  B. Forward file
  C. PAC file
  D. Bridge mode
  C. PAC file

  ---

  Explanation

• Question 738:

  An engineer needs to add protection for data in transit and have headers in the email message. Which configuration is needed to accomplish this goal?

  A. Provision the email appliance
  B. Deploy an encryption appliance.
  C. Map sender IP addresses to a host interface.
  D. Enable flagged message handling
  B. Deploy an encryption appliance.

  ---

  Explanation

• Question 739:

  How do the features of DMVPN compare to IPsec VPN?

  A. DMVPN supports high availability routing, and IPsec VPN supports stateless failover.
  B. DMVPN uses hub-and-spoke topology, and IPsec VPN uses on-demand spoke topology.
  C. DMVPN supports non-IP protocols, and IPsec VPN only supports IP protocols.
  D. DMVPN supports multiple vendors, and IPsec VPN only supports Cisco products.
  A. DMVPN supports high availability routing, and IPsec VPN supports stateless failover.

  ---

  Explanation

• Question 740:

  In which situation should an Endpoint Detection and Response solution be chosen versus an Endpoint Protection Platform?

  A. when there is a need for traditional anti-malware detection
  B. when there is no need to have the solution centrally managed
  C. when there is no firewall on the network
  D. when there is a need to have more advanced detection capabilities
  D. when there is a need to have more advanced detection capabilities

  ---

  Explanation

  Endpoint protection platforms (EPP) prevent endpoint security threats like known and unknown malware.Endpoint detection and response (EDR) solutions can detect and respond to threats that your EPP and other security tools did not catch.EDR and EPP have similar goals but are designed to fulfill different purposes. EPP is designed to providedevice-level protection by identifying malicious files, detecting potentially malicious activity, and providing tools for incident investigation and response.The preventative nature of EPP complements proactive EDR. EPP acts as the first line of defense, filtering out attacks that can be detected by the organization's deployed security solutions. EDR acts as a second layer of protection, enabling security analysts to perform threat hunting and identify more subtle threats to the endpoint.Effective endpoint defense requires a solution that integrates the capabilities of both EDR and EPP to provide protection against cyber threats without overwhelming an organization's security team.