Cisco 350-701 Exam Dumps

Cisco 350-701 Sample Question Answers

Cisco 350-701 Sample Questions

Question # 1

What is the difference between EPP and EDR?

A. EPP focuses primarily on threats that have evaded front-line defenses that entered theenvironment. 
B. Having an EPP solution allows an engineer to detect, investigate, and remediatemodern threats. 
C. EDR focuses solely on prevention at the perimeter. 
D. Having an EDR solution gives an engineer the capability to flag offending files at the firstsign of malicious behavior. 

Answer: D

Show Answer

Question # 2

Cisco Umbrella is a cloud-delivered network security service that provides DNSlayer security, secure web gateway, cloud-delivered firewall, cloud access securitybroker, and threat intelligence3. It does not offer data security features such asDLP, data inspection, and data blocking4.Cisco AppDynamics Cloud Monitoring is a cloud-native application performancemanagement solution that helps you monitor, troubleshoot, and optimize yourcloud applications. It does not offer user security, data security, or app securityfeatures as a CASB solution.Cisco Stealthwatch is a network traffic analysis solution that provides visibility andthreat detection across your network, endpoints, and cloud. It does not offer datasecurity features such as DLP, data inspection, and data blocking.References: 3: Cisco Umbrella Packages - Cisco Umbrella 1: Cisco Cloudlock - Cisco 2:Cisco Cloudlock Cisco Cloudlock: Secure Cloud Data 4: Easy to Deploy & Simple toManage CASB Solution - Cisco Umbrella : Cisco AppDynamics Cloud Monitoring : CiscoStealthwatch - Cisco

A. signature-based endpoint protection on company endpoints 
B. macro-based protection to keep connected endpoints safe 
C. continuous monitoring of all files that are located on connected endpoints 
D. email integration to protect endpoints from malicious content that is located in email 
E. real-time feeds from global threat intelligence centers 

Answer: C.E

Show Answer

Question # 3

An engineer is trying to decide whether to use Cisco Umbrella, Cisco CloudLock, CiscoStealthwatch, or Cisco AppDynamics Cloud Monitoring for visibility into data transfers aswell as protection against data exfiltration Which solution best meets these requirements?

A. Cisco CloudLock 
B. Cisco AppDynamics Cloud Monitoring 
C. Cisco Umbrella 
D. Cisco Stealthwatch

Answer: A

Show Answer

Question # 4

An engineer needs to detect and quarantine a file named abc424400664 zip based on theMD5 signature of the file using the Outbreak Control list feature within Cisco AdvancedMalware Protection (AMP) for Endpoints The configured detection method must work onfiles of unknown disposition Which Outbreak Control list must be configured to providethis?

A. Blocked Application 
B. Simple Custom Detection 
C. Advanced Custom Detection 
D. Android Custom Detection 

Answer: B

Show Answer

Question # 5

Which Cisco network security device supports contextual awareness?

A. Firepower 
B. CISCO ASA 
C. Cisco IOS 
D. ISE 

Answer: A

Show Answer

Question # 6

An organization uses Cisco FMC to centrally manage multiple Cisco FTD devices. Thedefault managementport conflicts with other communications on the network and must be changed. What mustbe done to ensurethat all devices can communicate together?

A. Manually change the management port on Cisco FMC and all managed Cisco FTD devices
B. Set the tunnel to go through the Cisco FTD
C. Change the management port on Cisco FMC so that it pushes the change to allmanaged Cisco FTD devices
D. Set the tunnel port to 8305 

Answer: A

Show Answer

Question # 7

Which configuration method provides the options to prevent physical and virtual endpoint devices that are in the same base EPG or uSeg from being able to communicate with each other with Vmware VDS or Microsoft vSwitch?

A. inter-EPG isolation 
B. inter-VLAN security 
C. intra-EPG isolation 
D. placement in separate EPGs 

Answer: C

Show Answer

Question # 8

Which role is a default guest type in Cisco ISE?

A. Monthly 
B. Yearly 
C. Contractor 
D. Full-Time

Answer: C,D

Show Answer

Question # 9

An engineer is implementing DHCP security mechanisms and needs the ability to addadditional attributes to profiles that are created within Cisco ISE Which action accomplishesthis task?

A. Define MAC-to-lP address mappings in the switch to ensure that rogue devices cannotget an IP address 
B. Use DHCP option 82 to ensure that the request is from a legitimate endpoint and sendthe information to Cisco ISE 
C. Modify the DHCP relay and point the IP address to Cisco ISE. 
D. Configure DHCP snooping on the switch VLANs and trust the necessary interfaces

Answer: B

Show Answer

Question # 10

Which threat intelligence standard contains malware hashes?

A. advanced persistent threat 
B. open command and control  
C. structured threat information expression 
D. trusted automated exchange of indicator information

Answer: D

Show Answer

Question # 11

What are two functions of IKEv1 but not IKEv2? (Choose two)

A. NAT-T is supported in IKEv1 but rot in IKEv2. 
B. With IKEv1, when using aggressive mode, the initiator and responder identities arepassed cleartext 
C. With IKEv1, mode negotiates faster than main mode  
D. IKEv1 uses EAP authentication 
E. IKEv1 conversations are initiated by the IKE_SA_INIT message

Answer: B,C

Show Answer

Question # 12

A network administrator is setting up Cisco FMC to send logs to Cisco Security Analyticsand Logging (SaaS). The network administrator is anticipating a high volume of loggingevents from the firewalls and wants lo limit the strain on firewall resources. Which methodmust the administrator use to send these logs to Cisco Security Analytics and Logging?

A. SFTP using the FMCCLI  
B. syslog using the Secure Event Connector 
C. direct connection using SNMP traps 
D. HTTP POST using the Security Analytics FMC plugin

Answer: B

Show Answer

Question # 13

Which open standard creates a framework for sharing threat intelligence in a machine digestible format?

A. OpenC2 
B. OpenlOC 
C. CybOX 
D. STIX 

Answer: D

Show Answer

Question # 14

Which two actions does the Cisco identity Services Engine posture module provide thatensures endpoint security?(Choose two.)

A. The latest antivirus updates are applied before access is allowed. 
B. Assignments to endpoint groups are made dynamically, based on endpoint attributes. 
C. Patch management remediation is performed.  
D. A centralized management solution is deployed. 
E. Endpoint supplicant configuration is deployed.

Answer: A,C

Show Answer

Question # 15

How does the Cisco WSA enforce bandwidth restrictions for web applications?

A. It implements a policy route to redirect application traffic to a lower-bandwidth link. 
B. It dynamically creates a scavenger class QoS policy and applies it to each client thatconnects through the WSA. 
C. It sends commands to the uplink router to apply traffic policing to the application traffic. 
D. It simulates a slower link by introducing latency into application traffic. 

Answer: D

Show Answer