Cisco 350-701 Free Practice Questions

NEW QUESTION 1
Which information is required when adding a device to Firepower Management Center?

• A. username and password
• B. encryption method
• C. device serial number
• D. registration key

Answer: D

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Device_Management_Basics.html#ID-2242-0000069d

NEW QUESTION 2
DRAG DROP
Drag and drop the Firepower Next Generation Intrustion Prevention System detectors from the left onto the correct definitions on the right.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 3
Which Cisco product provides proactive endpoint protection and allows administrators to centrally manage the deployment?

• A. NGFW
• B. AMP
• C. WSA
• D. ESA

Answer: B

NEW QUESTION 4
Which two prevention techniques are used to mitigate SQL injection attacks? (Choose two.)

• A. Check integer, float, or Boolean string parameters to ensure accurate values.
• B. Use prepared statements and parameterized queries.
• C. Secure the connection between the web and the app tier.
• D. Write SQL code instead of using object-relational mapping libraries.
• E. Block SQL code execution in the web application database login.

Answer: AB

Explanation:
Reference: https://en.wikipedia.org/wiki/SQL_injection

NEW QUESTION 5
Which technology must be used to implement secure VPN connectivity among company branches over a private IP cloud with any-to-any scalable connectivity?

• A. DMVPN
• B. FlexVPN
• C. IPsec DVTI
• D. GET VPN

Answer: D

NEW QUESTION 6
Which feature within Cisco Umbrella allows for the ability to inspect secure HTTP traffic?

• A. File Analysis
• B. SafeSearch
• C. SSL Decryption
• D. Destination Lists

Answer: C

NEW QUESTION 7
When web policies are configured in Cisco Umbrella, what provides the ability to ensure that domains are blocked when they host malware, command and control, phishing, and more threats?

• A. Application Control
• B. Security Category Blocking
• C. Content Category Blocking
• D. File Analysis

Answer: B

Explanation:
Reference: https://support.umbrella.com/hc/en-us/articles/115004563666-Understanding-Security-Categories

NEW QUESTION 8
Which two services must remain as on-premises equipment when a hybrid email solution is deployed? (Choose two.)

• A. DDoS
• B. antispam
• C. antivirus
• D. encryption
• E. DLP

Answer: DE

Explanation:
Reference: https://www.cisco.com/c/dam/en/us/td/docs/security/ces/overview_guide/Cisco_Cloud_Hybrid_Email_Security_Overview_Guide.pdf

NEW QUESTION 9
Which two application layer preprocessors are used by Firepower Next Generation Intrusion Prevention System? (Choose two.)

• A. SIP
• B. inline normalization
• C. SSL
• D. packet decoder
• E. modbus

Answer: AC

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Application_Layer_Preprocessors.html

NEW QUESTION 10
An engineer configured a new network identity in Cisco Umbrella but must verify that traffic is being routed through the Cisco Umbrella network. Which action tests the routing?

• A. Ensure that the client computers are pointing to the on-premises DNS servers.
• B. Enable the Intelligent Proxy to validate that traffic is being routed correctly.
• C. Add the public IP address that the client computers are behind to a Core Identity.
• D. Browse to http://welcome.umbrella.com/ to validate that the new identity is working.

Answer: B

NEW QUESTION 11
Which proxy mode must be used on Cisco WSA to redirect TCP traffic with WCCP?

• A. transparent
• B. redirection
• C. forward
• D. proxy gateway

Answer: A

Explanation:
Reference: https://www.cisco.com/c/en/us/support/docs/security/web-security-appliance/117940-qa-wsa-00.html

NEW QUESTION 12
Which Talos reputation center allows you to track the reputation of IP addresses for email and web traffic?

• A. IP Blacklist Center
• B. File Reputation Center
• C. AMP Reputation Center
• D. IP and Domain Reputation Center

Answer: D

NEW QUESTION 13
What does the Cloudlock Apps Firewall do to mitigate security concerns from an application perspective?

• A. It allows the administrator to quarantine malicious files so that the application can function, just not maliciously.
• B. It discovers and controls cloud apps that are connected to a company’s corporate environment.
• C. It deletes any application that does not belong in the network.
• D. It sends the application information to an administrator to act on.

Answer: B

Explanation:
Reference: https://www.cisco.com/c/en/us/products/security/cloudlock/index.html#~features

NEW QUESTION 14
Which technology reduces data loss by identifying sensitive information stored in public computing environments?

• A. Cisco SDA
• B. Cisco Firepower
• C. Cisco HyperFlex
• D. Cisco Cloudlock

Answer: D

Explanation:
Reference: https://www.cisco.com/c/dam/en/us/products/collateral/security/cloudlock/cisco-cloudlock-cloud-data-security-datasheet.pdf

NEW QUESTION 15
An engineer is configuring AMP for endpoints and wants to block certain files from executing. Which outbreak control method is used to accomplish this task?

• A. device flow correlation
• B. simple detections
• C. application blocking list
• D. advanced custom detections

Answer: C

NEW QUESTION 16
......