Cisco 350-701 Online Practice Questions and Exam Preparation

Cisco 350-701 Online Questions & Answers

• Question 771:

  An engineer needs to detect and quarantine a file named abc424400664 zip based on the MD5 signature of the file using the Outbreak Control list feature within Cisco Advanced Malware Protection (AMP) for Endpoints The configured detection method must work on files of unknown disposition Which Outbreak Control list must be configured to provide this?

  A. Blocked Application
  B. Simple Custom Detection
  C. Advanced Custom Detection
  D. Android Custom Detection
  C. Advanced Custom Detection

  ---

  Explanation

• Question 772:

  How does Cisco Umbrella protect clients when they operate outside of the corporate network?

  A. by modifying the registry for DNS lookups
  B. by using Active Directory group policies to enforce Cisco Umbrella DNS servers
  C. by using the Cisco Umbrella roaming client
  D. by forcing DNS queries to the corporate name servers
  C. by using the Cisco Umbrella roaming client

  ---

  Explanation

• Question 773:

  Which PKI enrollment method allows the user to separate authentication and enrollment actions and also provides an option to specify HTTP/TFTP commands to perform file retrieval from the server?

  A. url
  B. terminal
  C. profile
  D. selfsigned
  C. profile

  ---

  Explanation

  https://www.cisco.com/c/en/us/support/docs/security-vpn/public-key- infrastructure-pki/211333-IOSPKI-Deployment-Guide-Initial-Design.html

• Question 774:

  A security engineer must create a policy based on the reputation verdict of a file from a Cisco Secure Email Gateway. The file with an undetermined verdict must be dropped. Which action must the security engineer take to meet the requirement?

  A. Configure threshold settings for files with no score to be allowed.
  B. Set up a policy to automatically drop files with no reputation score.
  C. Implement a policy to disable file analysis.
  D. Create a policy to send a file to quarantine.
  B. Set up a policy to automatically drop files with no reputation score.

  ---

  Explanation

• Question 775:

  What are two advantages of using Cisco Any connect over DMVPN? (Choose two)

  A. It provides spoke-to-spoke communications without traversing the hub
  B. It allows different routing protocols to work over the tunnel
  C. It allows customization of access policies based on user identity
  D. It allows multiple sites to connect to the data center
  E. It enables VPN access for individual users from their machines
  C. It allows customization of access policies based on user identity
  E. It enables VPN access for individual users from their machines

  ---

  Explanation

  Cisco Anyconnect is a Remote access VPN client based solution where users can install the client on their machines and can connect to the respective VPN devices (ASA/FTD/Router). In order to secure connectivity for Anyconnect Users, one can also create custom access policies to ensure proper conditions are met before access is granted to the VPN user.

• Question 776:

  An organization is trying to improve their Defense in Depth by blocking malicious destinations prior to a connection being established. The solution must be able to block certain applications from being used within the network. Which product should be used to accomplish this goal?

  A. Cisco Firepower
  B. Cisco Umbrella
  C. ISE
  D. AMP
  B. Cisco Umbrella

  ---

  Explanation

  ExplanationCisco Umbrella protects users from accessing malicious domains by proactively analyzing and blocking unsafe destinations ?before a connection is ever made. Thus it can protect from phishing attacks by blocking suspicious domains when users click on the given links that an attacker sent.

• Question 777:

  What describes the function of the crypto isakmp key C1$c451090787 address 0.0.0.0 0.0.0.0 command when configuring an IPsec VPN tunnel on a Cisco IOS router?

  A. It allows connections from any hosts using the defined preshared key.
  B. It defines that all data is going to be encrypted via the VPN.
  C. It configures the IP address and subnet mask of the VPN server.
  D. It drops spoofed VPN traffic using 0.0.0.0 as the source or destination IP address.
  A. It allows connections from any hosts using the defined preshared key.

  ---

  Explanation

• Question 778:

  Which type of encryption uses a public key and private key?

  A. Asymmetric
  B. Symmetric
  C. Linear
  D. Nonlinear
  A. Asymmetric

  ---

  Explanation

• Question 779:

  Which group within Cisco writes and publishes a weekly newsletter to help cybersecurity professionals remain aware of the ongoing and most prevalent threats?

  A. PSIRT
  B. Talos
  C. CSIRT
  D. DEVNET
  B. Talos

  ---

  Explanation

  https://talosintelligence.com/newsletters

• Question 780:

  An engineer used a posture check on a Microsoft Windows endpoint and discovered that the MS17-010 patch was not installed, which left the endpoint vulnerable to WannaCry ransomware. Which two solutions mitigate the risk of this ransom ware infection? (Choose two)

  A. Configure a posture policy in Cisco Identity Services Engine to install the MS17-010 patch before allowing access on the network.
  B. Set up a profiling policy in Cisco Identity Service Engine to check and endpoint patch level before allowing access on the network.
  C. Configure a posture policy in Cisco Identity Services Engine to check that an endpoint patch level is met before allowing access on the network.
  D. Configure endpoint firewall policies to stop the exploit traffic from being allowed to run and replicate throughout the network.
  E. Set up a well-defined endpoint patching strategy to ensure that endpoints have critical vulnerabilities patched in a timely fashion.
  A. Configure a posture policy in Cisco Identity Services Engine to install the MS17-010 patch before allowing access on the network.
  C. Configure a posture policy in Cisco Identity Services Engine to check that an endpoint patch level is met before allowing access on the network.

  ---

  Explanation

  A posture policy is a collection of posture requirements, which are associated with one or more identity groups, and operating systems. We can configure ISE to check for the Windows patch at Work Centers > Posture > Posture Elements > Conditions > File.In this example, we are going to use the predefined file check to ensure that our Windows 10 clients have the critical security patch installed to prevent the Wanna Cry malware.