Latest 350-701 Pass Guaranteed Exam Dumps Certification Sample Questions [Q138-Q160] – IT Certification Exam Questions & Answers

4.7/5 - (7 votes)

Latest 350-701 Pass Guaranteed Exam Dumps Certification Sample Questions

New 350-701 Test Materials & Valid 350-701 Test Engine

Cisco 350-701 exam is a rigorous certification exam that evaluates the candidates’ knowledge and skills in various aspects of security technologies. 350-701 exam is essential for IT professionals who want to advance their careers in the field of network security and earn the CCNP Security certification. With the increasing demand for network security professionals, passing 350-701 exam can open up various job opportunities and career growth paths.

Cisco 350-701 (Implementing and Operating Cisco Security Core Technologies) Exam is designed for network security professionals who are responsible for implementing and operating core security technologies for their organization. 350-701 exam focuses on the latest security technologies and solutions that are necessary to implement a comprehensive security strategy. 350-701 exam validates the knowledge and skills of the candidates in areas such as network security, cloud security, content security, endpoint protection and detection, secure network access, visibility, and enforcement.

QUESTION 138
Refer to the exhibit.

What is a result of the configuration?

Traffic from the DMZ network is redirected.

Traffic from the inside network is redirected.

All TCP traffic is redirected.

Traffic from the inside and DMZ networks is redirected.

QUESTION 139
Due to a traffic storm on the network, two interfaces were error-disabled, and both interfaces sent SNMP traps. Which two actions must be taken to ensure that interfaces are put back into service? (Choose two)

Have Cisco Prime Infrastructure issue an SNMP set command to re-enable the ports after the preconfigured interval.

Use EEM to have the ports return to service automatically in less than 300 seconds.

Enter the shutdown and no shutdown commands on the interfaces.

Enable the snmp-server enable traps command and wait 300 seconds

Ensure that interfaces are configured with the error-disable detection and recovery feature

QUESTION 140
How does Cisco Advanced Phishing Protection protect users?

It validates the sender by using DKIM.

It determines which identities are perceived by the sender

It uses machine learning and real-time behavior analytics.

It utilizes sensors that send messages securely.

QUESTION 141
When Cisco and other industry organizations publish and inform users of known security findings and vulnerabilities, which name is used?

Common Security Exploits

Common Vulnerabilities and Exposures

Common Exploits and Vulnerabilities

Common Vulnerabilities, Exploits and Threats

QUESTION 142
Which attack is preventable by Cisco ESA but not by the Cisco WSA?

buffer overflow

DoS

SQL injection

phishing

QUESTION 143
What is the purpose of the Cisco Endpoint IoC feature?

It is an incident response tool.

It provides stealth threat prevention.

It is a signature-based engine.

It provides precompromise detection.

QUESTION 144
Which feature requires that network telemetry be enabled?

per-interface stats

SNMP trap notification

Layer 2 device discovery

central syslog system

QUESTION 145
Drag and drop the Firepower Next Generation Intrustion Prevention System detectors from the left onto the correct definitions on the right.

QUESTION 146
A network administrator is configuring a rule in an access control policy to block certain URLs and selects the “Chat and Instant Messaging” category. Which reputation score should be selected to accomplish this goal?

QUESTION 147
Refer to the exhibit.

Refer to the exhibit. All servers are in the same VLAN/Subnet. DNS Server-1 and DNS Server-2 must communicate with each other, and all servers must communicate with default gateway multilayer switch. Which type of private VLAN ports should be configured to prevent communication between DNS servers and the file server?

Configure GigabitEthernet0/1 as community port, GigabitEthernet0/2 as isolated port, and GigabitEthernet0/3 and GigabitEthernet0/4 as promiscuous ports.

Configure GigabitEthernet0/1 as community port, GigabitEthernet0/2 as promiscuous port, Gigabit Ethernet0/3 and GigabitEthernet0/4 as isolated ports.

Configure GigabitEthernet0/1 as promiscuous port, GigabitEthernet0/2 as isolated port and GigabitEthernet0/3 and GrgabitEthernet0/4 as community ports.

Configure GigabitEthernet0/1 as promiscuous port, GigabitEthernet0/2 as community port, and GigabitEthernet0/3 and GrgabitEthernet0/4 as isolated ports.

QUESTION 148
Which two endpoint measures are used to minimize the chances of falling victim to phishing and social engineering attacks? (Choose two.)

Patch for cross-site scripting.

Perform backups to the private cloud.

Protect against input validation and character escapes in the endpoint.

Install a spam and virus email filter.

Protect systems with an up-to-date antimalware program.

QUESTION 149
An engineer is configuring 802.1X authentication on Cisco switches in the network and is using CoA as a mechanism. Which port on the firewall must be opened to allow the CoA traffic to traverse the network?

TCP 6514

UDP 1700

TCP 49

UDP 1812

QUESTION 150
Drag and drop the descriptions from the left onto the encryption algorithms on the right.

QUESTION 151
Which two application layer preprocessors are used by Firepower Next Generation Intrusion Prevention System? (Choose two)

packet decoder

SIP

modbus

inline normalization

SSL

QUESTION 152
What is managed by Cisco Security Manager?

access point

WSA

ASA

ESA

QUESTION 153
What is an advantage of network telemetry over SNMP pulls?

accuracy

encapsulation

security

scalability

QUESTION 154
A malicious user gained network access by spoofing printer connections that were authorized using MAB on four different switch ports at the same time. What two catalyst switch security features will prevent further violations? (Choose two)

DHCP Snooping

802.1AE MacSec

Port security

IP Device tracking

Dynamic ARP inspection

Private VLANs

QUESTION 155
Which suspicious pattern enables the Cisco Tetration platform to learn the normal behavior of users?

file access from a different user

interesting file access

user login suspicious behavior

privilege escalation

QUESTION 156
An engineer is configuring AMP for endpoints and wants to block certain files from executing. Which outbreak control method is used to accomplish this task?

device flow correlation

simple detections

application blocking list

advanced custom detections

QUESTION 157
What does Cisco AMP for Endpoints use to help an organization detect different families of malware?

Ethos Engine to perform fuzzy fingerprinting

Tetra Engine to detect malware when me endpoint is connected to the cloud

Clam AV Engine to perform email scanning

Spero Engine with machine learning to perform dynamic analysis

QUESTION 158
Which public cloud provider supports the Cisco Next Generation Firewall Virtual?

Google Cloud Platform

Red Hat Enterprise Visualization

VMware ESXi

Amazon Web Services

Cisco Firepower NGFW Virtual (NGFWv) is the virtualized version of Cisco’s Firepower next generation firewall. The Cisco NGFW virtual appliance is available in the AWS and Azure marketplaces. In AWS, it can be deployed in routed and passive modes. Passive mode design requires ERSPAN, the Encapsulated Remote Switched Port Analyzer, which is currently not available in Azure. In passive mode, NGFWv inspects packets like an Intrusion Detection System (IDS) appliance, but no action can be taken on the packet. In routed mode NGFWv acts as a next hop for workloads. It can inspect packets and also take action on the packet based on rule and policy definitions. Reference: https://www.cisco.com/c/en/us/products/collateral/security/adaptive-security-virtual-appliance-asav/ white-paper-c11-740505.html The Cisco NGFW virtual appliance is available in the AWS and Azure marketplaces. In AWS, it can be deployed in routed and passive modes. Passive mode design requires ERSPAN, the Encapsulated Remote Switched Port Analyzer, which is currently not available in Azure.
In passive mode, NGFWv inspects packets like an Intrusion Detection System (IDS) appliance, but no action can be taken on the packet.
In routed mode NGFWv acts as a next hop for workloads. It can inspect packets and also take action on the packet based on rule and policy definitions.
Cisco Firepower NGFW Virtual (NGFWv) is the virtualized version of Cisco’s Firepower next generation firewall. The Cisco NGFW virtual appliance is available in the AWS and Azure marketplaces. In AWS, it can be deployed in routed and passive modes. Passive mode design requires ERSPAN, the Encapsulated Remote Switched Port Analyzer, which is currently not available in Azure. In passive mode, NGFWv inspects packets like an Intrusion Detection System (IDS) appliance, but no action can be taken on the packet. In routed mode NGFWv acts as a next hop for workloads. It can inspect packets and also take action on the packet based on rule and policy definitions. Reference: https://www.cisco.com/c/en/us/products/collateral/security/adaptive-security-virtual-appliance-asav/ white-paper-c11-740505.html

QUESTION 159
What is the function of SDN southbound API protocols?

to allow for the dynamic configuration of control plane applications

to enable the controller to make changes

to enable the controller to use REST

to allow for the static configuration of control plane applications