Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 751:

  When a transparent authentication fails on the Web Security Appliance, which type of access does the end user get?

  A. guest
  B. limited Internet
  C. blocked
  D. full Internet
  A. guest

  ---

  Explanation

  If transparent authentication fails, you can configure how to handle the transaction: you can grant the user guest access, or you can force an authentication prompt to appear to the user. https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa_12-5/User-Guide/b_WSA_UserGuide_12_5/b_WSA_UserGuide_11_7_chapter_0101.html

• Question 752:

  DRAG DROP

  Drag and drop the NetFlow export formats from the left onto the descriptions on the right.

  Select and Place:

  

  

• Question 753:

  DRAG DROP

  Drag and drop the concepts from the left onto the correct descriptions on the right.

  Select and Place:

  

  

• Question 754:

  Which solution stops unauthorized access to the system if a user's password is compromised?

  A. VPN
  B. MFA
  C. AMP
  D. SSL
  B. MFA

  ---

  Explanation

• Question 755:

  Which command is used to log all events to a destination collector 209.165.201.10?

  A. CiscoASA(config-pmap-c)# flow-export event-type all destination 209.165.201.10
  B. CiscoASA(config-cmap)# flow-export event-type flow-update destination 209.165.201.10
  C. CiscoASA(config-pmap-c)# flow-export event-type flow-update destination 209.165.201.10
  D. CiscoASA(config-cmap)# flow-export event-type all destination 209.165.201.10
  A. CiscoASA(config-pmap-c)# flow-export event-type all destination 209.165.201.10

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/security/asa/asa84/configuration/guide/asa_84_cli_config/ monitor_nsel.html

• Question 756:

  Refer to the exhibit.

  

  Which statement about the authentication protocol used in the configuration is true?

  A. The authentication request contains only a password
  B. The authentication request contains only a username
  C. The authentication and authorization requests are grouped in a single packet
  D. There are separate authentication and authorization request packets
  C. The authentication and authorization requests are grouped in a single packet

  ---

  Explanation

  This command uses RADIUS which combines authentication and authorization in one function (packet).

• Question 757:

  When a next-generation endpoint security solution is selected for a company, what are two key deliverables that help justify the implementation? (Choose two.)

  A. signature-based endpoint protection on company endpoints
  B. macro-based protection to keep connected endpoints safe
  C. continuous monitoring of all files that are located on connected endpoints
  D. email integration to protect endpoints from malicious content that is located in email
  E. real-time feeds from global threat intelligence centers
  C. continuous monitoring of all files that are located on connected endpoints
  E. real-time feeds from global threat intelligence centers

  ---

  Explanation

• Question 758:

  A network administrator is setting up Cisco FMC to send logs to Cisco Security Analytics and Logging (SaaS). The network administrator is anticipating a high volume of logging events from the firewalls and wants lo limit the strain on firewall resources. Which method must the administrator use to send these logs to Cisco Security Analytics and Logging?

  A. SFTP using the FMCCLI
  B. syslog using the Secure Event Connector
  C. direct connection using SNMP traps
  D. HTTP POST using the Security Analytics FMC plugin
  B. syslog using the Secure Event Connector

  ---

  Explanation

  The Secure Event Connector is a component of the Security Analytics and Logging (SaaS) solution that enables the FMC to send logs to the cloud-based service. The Secure Event Connector uses syslog to forward events from the FMC and the managed devices to the cloud. This method reduces the load on the firewall resources, as the events are sent in batches and compressed before transmission. The Secure Event Connector also provides encryption, authentication, and reliability for the log data. The other methods are not supported by the Security Analytics and Logging (SaaS) solution12 References := 1:

  Cisco Security Analytics and Logging (On Premises)

• Question 759:

  What is managed by Cisco Security Manager?

  A. Cisco WLC
  B. Cisco ESA
  C. Cisco WSA
  D. Cisco ASA
  D. Cisco ASA

  ---

  Explanation

  https://www.cisco.com/c/en/us/products/security/security-manager/index.html

• Question 760:

  Which two tasks allow NetFlow on a Cisco ASA 5500 Series firewall? (Choose two)

  A. Enable NetFlow Version 9.
  B. Create an ACL to allow UDP traffic on port 9996.
  C. Apply NetFlow Exporter to the outside interface in the inbound direction.
  D. Create a class map to match interesting traffic.
  E. Define a NetFlow collector by using the flow-export command
  D. Create a class map to match interesting traffic.
  E. Define a NetFlow collector by using the flow-export command

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/security/asa/special/netflow/guide/asa_netflow.html#pgfId-1330480