Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 741:

  A Cisco ISE engineer configures Central Web Authentication (CWA) for wireless guest access and must have the guest endpoints redirect to the guest portal for authentication and authorization. While testing the policy, the engineer notices that the device is not redirected and instead gets full guest access. What must be done for the redirect to work?

  A. Tag the guest portal in the CWA part of the Common Tasks section of the authorization profile for the authorization policy line that the unauthenticated devices hit.
  B. Use the track movement option within the authorization profile for the authorization policy line that the unauthenticated devices hit.
  C. Create an advanced attribute setting of Cisco:cisco-gateway-id=guest within the authorization profile for the authorization policy line that the unauthenticated devices hit.
  D. Add the DACL name for the Airespace ACL configured on the WLC in the Common Tasks section of the authorization profile for the authorization policy line that the unauthenticated devices hit.
  A. Tag the guest portal in the CWA part of the Common Tasks section of the authorization profile for the authorization policy line that the unauthenticated devices hit.

  ---

  Explanation

• Question 742:

  A company is experiencing exfiltration of credit card numbers that are not being stored on- premise. The company needs to be able to protect sensitive data throughout the full environment. Which tool should be used to accomplish this goal?

  A. Security Manager
  B. Cloudlock
  C. Web Security Appliance
  D. Cisco ISE
  B. Cloudlock

  ---

  Explanation

  Cisco Cloudlock is a cloud-native cloud access security broker (CASB) that helps you move to the cloud safely. It protects your cloud users, data, and apps. Cisco Cloudlock provides visibility and compliance checks, protects data against misuse and exfiltration, and provides threat protections against malware like ransomware.

• Question 743:

  Which Cisco AMP file disposition valid?

  A. pristine
  B. malware
  C. dirty
  D. non malicious
  B. malware

  ---

  Explanation

• Question 744:

  An engineer wants to automatically assign endpoints that have a specific OUI into a new endpoint group. Which probe must be enabled for this type of profiling to work?

  A. NetFlow
  B. NMAP
  C. SNMP
  D. DHCP
  B. NMAP

  ---

  Explanation

• Question 745:

  How does the Cisco WSA enforce bandwidth restrictions for web applications?

  A. It implements a policy route to redirect application traffic to a lower-bandwidth link.
  B. It dynamically creates a scavenger class QoS policy and applies it to each client that connects through the WSA.
  C. It sends commands to the uplink router to apply traffic policing to the application traffic.
  D. It simulates a slower link by introducing latency into application traffic.
  C. It sends commands to the uplink router to apply traffic policing to the application traffic.

  ---

  Explanation

• Question 746:

  A Cisco ESA network administrator has been tasked to use a newly installed service to help create policy based on the reputation verdict. During testing, it is discovered that the Cisco ESA is not dropping files that have an undetermined verdict. What is causing this issue?

  A. The policy was created to send a message to quarantine instead of drop
  B. The file has a reputation score that is above the threshold
  C. The file has a reputation score that is below the threshold
  D. The policy was created to disable file analysis
  C. The file has a reputation score that is below the threshold

  ---

  Explanation

  Quarantine is only for unrecognised files. When file is undetermined, reputation score is checked. Reputation 1-59: Deliver file / Reputation 60-100: Block file Look at - Figure 1. Advanced Malware Protection Workflow for Public-Cloud File Analysis Deployments https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_010000.html

• Question 747:

  DRAG DROP

  An engineer must configure AsyncOS for Cisco Secure Web Appliance to push log files to a syslog server using the SCP retrieval method. Drag and drop the steps from the left into the sequence on the right to complete the configuration.

  Select and Place:

  

  

• Question 748:

  Which two algorithms must be used when an engineer is creating a connection that will have classified data across it? (Choose two.)

  A. RSA-3072
  B. ECDSA-256
  C. AES-256
  D. RC4
  E. SHA-384
  A. RSA-3072
  C. AES-256

  ---

  Explanation

• Question 749:

  An engineer is configuring AMP for endpoints and wants to block certain files from executing. Which outbreak control method is used to accomplish this task?

  A. device flow correlation
  B. simple detections
  C. application blocking list
  D. advanced custom detections
  C. application blocking list

  ---

  Explanation

• Question 750:

  An engineer must register a fixed network on a Cisco Umbrella platform. Which two actions must be performed when adding a new public IP address? (Choose two.)

  A. Enter a network public IP address.
  B. Install the Umbrella root certificate.
  C. Configure the DNS security settings.
  D. Point DNS to Umbrella platform DNS servers.
  E. Point DHCP to Umbrella platform DHCP servers.
  A. Enter a network public IP address.
  D. Point DNS to Umbrella platform DNS servers.

  ---

  Explanation