Cisco 350-701 Free Practice Questions

NEW QUESTION 1
Which feature requires a network discovery policy on the Cisco Firepower Next Generation Intrusion Prevention System?

• A. security intelligence
• B. impact flags
• C. health monitoring
• D. URL filtering

Answer: A

NEW QUESTION 2
What is the primary difference between an Endpoint Protection Platform and an Endpoint Detection and Response?

• A. EPP focuses on prevention, and EDR focuses on advanced threats that evade perimeter defenses.
• B. EDR focuses on prevention, and EPP focuses on advanced threats that evade perimeter defenses.
• C. EPP focuses on network security, and EDR focuses on device security.
• D. EDR focuses on network security, and EPP focuses on device security.

Answer: A

Explanation:
Reference: https://www.cisco.com/c/en/us/products/security/endpoint-security/what-is-endpoint-detection-response-edr.html

NEW QUESTION 3
Which two preventive measures are used to control cross-site scripting? (Choose two.)

• A. Enable client-side scripts on a per-domain basis.
• B. Incorporate contextual output encoding/escaping.
• C. Disable cookie inspection in the HTML inspection engine.
• D. Run untrusted HTML input through an HTML sanitization engine.
• E. SameSite cookie attribute should not be used.

Answer: AB

NEW QUESTION 4
Refer to the exhibit.

Which statement about the authentication protocol used in the configuration is true?

• A. The authentication request contains only a password
• B. The authentication request contains only a username
• C. The authentication and authorization requests are grouped in a single packet.
• D. There are separate authentication and authorization request packets.

Answer: C

NEW QUESTION 5
Which solution protects hybrid cloud deployment workloads with application visibility and segmentation?

• A. Nexus
• B. Stealthwatch
• C. Firepower
• D. Tetration

Answer: D

Explanation:
Reference: https://www.cisco.com/c/en/us/solutions/security/secure-data-center-solution/index.html#~products

NEW QUESTION 6
Which policy is used to capture host information on the Cisco Firepower Next Generation Intrusion Prevention System?

• A. correlation
• B. intrusion
• C. access control
• D. network discovery

Answer: D

NEW QUESTION 7
What is a required prerequisite to enable malware file scanning for the Secure Internet Gateway?

• A. Enable IP Layer enforcement.
• B. Activate the Advanced Malware Protection license
• C. Activate SSL decryption.
• D. Enable Intelligent Proxy.

Answer: D

NEW QUESTION 8
What is a language format designed to exchange threat intelligence that can be transported over the TAXII protocol?

• A. STIX
• B. XMPP
• C. pxGrid
• D. SMTP

Answer: A

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/web_security/scancenter/administrator/guide/b_ScanCenter_Administrator_Guide/b_ScanCenter_Administrator_Guide_chapter_0100011.pdf

NEW QUESTION 9
Which two probes are configured to gather attributes of connected endpoints using Cisco Identity Services Engine? (Choose two.)

• A. RADIUS
• B. TACACS+
• C. DHCP
• D. sFlow
• E. SMTP

Answer: AC

Explanation:
Reference: https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_prof_pol.html

NEW QUESTION 10
Which two descriptions of AES encryption are true? (Choose two.)

• A. AES is less secure than 3DES.
• B. AES is more secure than 3DES.
• C. AES can use a 168-bit key for encryption.
• D. AES can use a 256-bit key for encryption.
• E. AES encrypts and decrypts a key three times in sequence.

Answer: BD

Explanation:
Reference: https://gpdb.docs.pivotal.io/43190/admin_guide/topics/ipsec.html

NEW QUESTION 11
What two mechanisms are used to redirect users to a web portal to authenticate to ISE for guest services? (Choose two.)

• A. TACACS+
• B. central web auth
• C. single sign-on
• D. multiple factor auth
• E. local web auth

Answer: BE

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_01110.html

NEW QUESTION 12
Which two capabilities does TAXII support? (Choose two.)

• A. exchange
• B. pull messaging
• C. binding
• D. correlation
• E. mitigating

Answer: BC

NEW QUESTION 13
DRAG DROP
Drag and drop the capabilities from the left onto the correct technologies on the right.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 14
How does Cisco Umbrella archive logs to an enterprise- owned storage?

• A. by using the Application Programming Interface to fetch the logs
• B. by sending logs via syslog to an on-premises or cloud-based syslog server
• C. by the system administrator downloading the logs from the Cisco Umbrella web portal
• D. by being configured to send logs to a self-managed AWS S3 bucket

Answer: D

Explanation:
Reference: https://docs.umbrella.com/deployment-umbrella/docs/log-management

NEW QUESTION 15
Which policy represents a shared set of features or parameters that define the aspects of a managed device that are likely to be similar to other managed devices in a deployment?

• A. group policy
• B. access control policy
• C. device management policy
• D. platform service policy

Answer: D

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/622/configuration/guide/fpmc-config-guide-v622/platform_settings_policies_for_managed_devices.pdf

NEW QUESTION 16
What are the two most commonly used authentication factors in multifactor authentication? (Choose two.)

• A. biometric factor
• B. time factor
• C. confidentiality factor
• D. knowledge factor
• E. encryption factor

Answer: AD

NEW QUESTION 17
Which technology must be used to implement secure VPN connectivity among company branches over a private IP cloud with any-to-any scalable connectivity?

• A. DMVPN
• B. FlexVPN
• C. IPsec DVTI
• D. GET VPN

Answer: D

NEW QUESTION 18
Which technology reduces data loss by identifying sensitive information stored in public computing environments?

• A. Cisco SDA
• B. Cisco Firepower
• C. Cisco HyperFlex
• D. Cisco Cloudlock

Answer: D

Explanation:
Reference: https://www.cisco.com/c/dam/en/us/products/collateral/security/cloudlock/cisco-cloudlock-cloud-data-security-datasheet.pdf

NEW QUESTION 19
In which form of attack is alternate encoding, such as hexadecimal representation, most often observed?

• A. smurf
• B. distributed denial of service
• C. cross-site scripting
• D. rootkit exploit

Answer: C

NEW QUESTION 20
How is Cisco Umbrella configured to log only security events?

• A. per policy
• B. in the Reporting settings
• C. in the Security Settings section
• D. per network in the Deployments section

Answer: A

Explanation:
Reference: https://docs.umbrella.com/deployment-umbrella/docs/log-management

NEW QUESTION 21
......