Free Cisco 350-701 Study Guides Exam Questions and Answer
350-701 Exam Dumps, 350-701 Practice Test Questions
Cisco 350-701 exam is designed to evaluate the knowledge and skills of candidates who want to implement and operate Cisco Security Core Technologies. 350-701 exam is a part of the CCNP Security certification program and it covers a wide range of security topics, including network security, cloud security, endpoint protection, network access control, and security automation. Passing 350-701 exam is a prerequisite for obtaining the CCNP Security certification.
NEW QUESTION # 367
Which parameter is required when configuring a Netflow exporter on a Cisco Router?
- A. source interface
- B. exporter name
- C. DSCP value
- D. exporter description
Answer: A
NEW QUESTION # 368
When NetFlow is applied to an interface, which component creates the flow monitor cache that is used to collect traffic based on the key and nonkey fields in the configured record?
- A. flow exporter
- B. flow sampler
- C. records
- D. flow monitor
Answer: A
NEW QUESTION # 369
What is a difference between Cisco AMP for Endpoints and Cisco Umbrella?
- A. Cisco AMP for Endpoints automatically researches indicators of compromise ..
- B. Cisco AMP for Endpoints prevents connections to malicious destinations, and C malware.
- C. Cisco AMP for Endpoints is a cloud-based service, and Cisco Umbrella is not.
- D. Cisco AMP for Endpoints prevents, detects, and responds to attacks before and against Internet threats.
Answer: A
NEW QUESTION # 370
Drag and drop the common security threats from the left onto the definitions on the right.
Answer:
Explanation:
NEW QUESTION # 371
An engineer is trying to securely connect to a router and wants to prevent insecure algorithms from being used.
However, the connection is failing. Which action should be taken to accomplish this goal?
- A. Generate the RSA key using the crypto key generate rsa command.
- B. Disable telnet using the no ip telnet command.
- C. Configure the port using the ip ssh port 22 command.
- D. Enable the SSH server using the ip ssh server command.
Answer: A
Explanation:
Explanation
https://learningnetwork.cisco.com/s/question/0D53i00000KsrhK/rsa-key
NEW QUESTION # 372
Which DoS attack uses fragmented packets in an attempt to crash a target machine?
- A. smurf
- B. SYN flood
- C. LAND
- D. teardrop
Answer: D
Explanation:
Reference: https://www.radware.com/security/ddos-knowledge-center/ddospedia/teardrop-attack/
NEW QUESTION # 373
Using Cisco Firepower's Security Intelligence policies, upon which two criteria is Firepower block based? (Choose two.)
- A. protocol IDs
- B. MAC addresses
- C. port numbers
- D. URLs
- E. IP addresses
Answer: D,E
Explanation:
NEW QUESTION # 374
On which part of the IT environment does DevSecOps focus?
- A. perimeter network
- B. wireless network
- C. data center
- D. application development
Answer: D
NEW QUESTION # 375
An organization wants to secure users, data, and applications in the cloud. The solution must be API-based and operate as a cloud-native CASB. Which solution must be used for this implementation?
- A. Cisco Firepower Next-Generation Firewall
- B. Cisco Cloud Email Security
- C. Cisco Cloudlock
- D. Cisco Umbrella
Answer: C
Explanation:
Cisco Cloudlock: Secure your cloud users, data, and applications with the cloud-native Cloud Access Security Broker (CASB) and cloud cybersecurity platform.
Reference:
738565.pdf
NEW QUESTION # 376 
Refer to the exhibit. What is the result of the Python script?
- A. It uses the POST HTTP method to obtain a token to be used for authentication.
- B. It uses the GET HTTP method to obtain a username and password to be used for authentication
- C. It uses the POST HTTP method to obtain a username and password to be used for authentication.
- D. It uses the GET HTTP method to obtain a token to be used for authentication.
Answer: A
Explanation:
The Python script is using the dnac_login function to authenticate to a Cisco DNA Center server and obtain a token that can be used for subsequent API calls. The function takes three parameters: host, username, and password. It constructs a URL for the authentication endpoint, which is https://{}/api/system/v1/auth/token. It then uses the requests library to send a POST HTTP request to the URL, passing the username and password as HTTP Basic Authentication credentials, and setting the headers to indicate the expected content type and response format. The function also disables the SSL verification by setting the verify parameter to False. This is not recommended for production environments, as it exposes the script to potential security risks. The function then returns the token value from the JSON response, which is accessed by using the response.json()["Token"] syntax. The token can then be used as a bearer token for subsequent API calls to the Cisco DNA Center server. References:
* Implementing and Operating Cisco Security Core Technologies (SCOR) v1.0, Module 9: Content Security, Lesson 9.3: Cisco DNA Center APIs
* Cisco DNA Center Platform API Reference, Authentication API
* Refer to the exhibit. What will happen when the Python script is executed?
NEW QUESTION # 377
Which industry standard is used to integrate Cisco ISE and pxGrid to each other and with other interoperable security platforms?
- A. ANSI
- B. IEEE
- C. IETF
- D. NIST
Answer: C
Explanation:
Cisco ISE and pxGrid use the IETF (Internet Engineering Task Force) standards to integrate with each other and with other interoperable security platforms. IETF is an open, international community of network designers, operators, vendors, and researchers who produce voluntary standards for the Internet. Cisco pxGrid is based on the IETF standards-track XMPP (Extensible Messaging and Presence Protocol) and RESTCONF (Representational State Transfer Configuration Protocol) technologies. These standards enable Cisco pxGrid to provide a scalable, secure, and open data-sharing platform that supports multiple security products and services. Cisco ISE uses the IETF standards-track RADIUS (Remote Authentication Dial-In User Service) and TACACS+ (Terminal Access Controller Access-Control System Plus) protocols to provide network access control and policy enforcement. Cisco ISE also supports the IETF standards-track SXP (Security Group Tag eXchange Protocol) to propagate security group tags across the network. By using the IETF standards, Cisco ISE and pxGrid can interoperate with other security platforms that support the same standards, such as Infoblox, Splunk, Rapid7, and more. References:
* Cisco pxGrid - Cisco
* ISE pxGrid General Information & FAQ - Cisco Community
* How To: Integrate Cisco WSA using ISE and TrustSec via pxGrid
* Infoblox DDI, Cisco ISE, and the pxGrid Solution Platform
NEW QUESTION # 378
Drag and drop the concepts from the left onto the correct descriptions on the right
Answer:
Explanation:
NEW QUESTION # 379
Refer to the exhibit.
Which statement about the authentication protocol used in the configuration is true?
- A. The authentication request contains only a password
- B. There are separate authentication and authorization request packets
- C. The authentication request contains only a username
- D. The authentication and authorization requests are grouped in a single packet
Answer: D
Explanation:
This command uses RADIUS which combines authentication and authorization in one function (packet).
NEW QUESTION # 380
What are two reasons for implementing a multifactor authentication solution such as Duo Security provide to an organization? (Choose two.)
- A. flexibility of different methods of 2FA such as phone callbacks, SMS passcodes. and push notifications
- B. single sign-on access to on-premises and cloud applications
- C. secure access to on-premises and cloud applications
- D. integration with 802.1x security using native Microsoft Windows supplicant
- E. identification and correction of application vulnerabilities before allowing access to resources
Answer: A,C
NEW QUESTION # 381
A university policy must allow open access to resources on the Internet for research, but internal workstations are exposed to malware. Which Cisco AMP feature allows the engineering team to determine whether a file is installed on a selected few workstations?
- A. file discovery
- B. file manager
- C. file prevalence
- D. file conviction
Answer: C
NEW QUESTION # 382
Which CoA response code is sent if an authorization state is changed successfully on a Cisco IOS device?
- A. CoA-ACK
- B. COA-AB
- C. CoA-NCL
- D. CoA-NAK
Answer: A
NEW QUESTION # 383
What are two Detection and Analytics Engines of Cognitive Threat Analytics? (Choose two)
- A. data exfiltration
- B. intelligent proxy
- C. snort
- D. command and control communication
- E. URL categorization
Answer: A,D
Explanation:
Cisco Cognitive Threat Analytics helps you quickly detect and respond to sophisticated, clandestine attacks that are already under way or are attempting to establish a presence within your environment. The solution automatically identifies and investigates suspicious or malicious web-based traffic. It identifies both potential and confirmed threats, allowing you to quickly remediate the infection and reduce the scope and damage of an attack, whether it's a known threat campaign that has spread across multiple organizations or a unique threat you've never seen before.
Detection and analytics features provided in Cognitive Threat Analytics are shown below:
+ Data exfiltration: Cognitive Threat Analytics uses statistical modeling of an organization's network to identify anomalous web traffic and pinpoint the exfiltration of sensitive data. It recognizes data exfiltration even in HTTPS-encoded traffic, without any need for you to decrypt transferred content
+ Command-and-control (C2) communication: Cognitive Threat Analytics combines a wide range of data, ranging from statistics collected on an Internet-wide level to host-specific local anomaly scores. Combining these indicators inside the statistical detection algorithms allows us to distinguish C2 communication from benign traffic and from other malicious activities. Cognitive Threat Analytics recognizes C2 even in HTTPSencoded or anonymous traffic, including Tor, without any need to decrypt transferred content, detecting a broad range of threats
...
Cisco Cognitive Threat Analytics helps you quickly detect and respond to sophisticated, clandestine attacks that are already under way or are attempting to establish a presence within your environment. The solution automatically identifies and investigates suspicious or malicious web-based traffic. It identifies both potential and confirmed threats, allowing you to quickly remediate the infection and reduce the scope and damage of an attack, whether it's a known threat campaign that has spread across multiple organizations or a unique threat you've never seen before.
Detection and analytics features provided in Cognitive Threat Analytics are shown below:
+ Data exfiltration: Cognitive Threat Analytics uses statistical modeling of an organization's network to identify anomalous web traffic and pinpoint the exfiltration of sensitive data. It recognizes data exfiltration even in HTTPS-encoded traffic, without any need for you to decrypt transferred content
+ Command-and-control (C2) communication: Cognitive Threat Analytics combines a wide range of data, ranging from statistics collected on an Internet-wide level to host-specific local anomaly scores. Combining these indicators inside the statistical detection algorithms allows us to distinguish C2 communication from benign traffic and from other malicious activities. Cognitive Threat Analytics recognizes C2 even in HTTPSencoded or anonymous traffic, including Tor, without any need to decrypt transferred content, detecting a broad range of threats
...
Reference:
Cisco Cognitive Threat Analytics helps you quickly detect and respond to sophisticated, clandestine attacks that are already under way or are attempting to establish a presence within your environment. The solution automatically identifies and investigates suspicious or malicious web-based traffic. It identifies both potential and confirmed threats, allowing you to quickly remediate the infection and reduce the scope and damage of an attack, whether it's a known threat campaign that has spread across multiple organizations or a unique threat you've never seen before.
Detection and analytics features provided in Cognitive Threat Analytics are shown below:
+ Data exfiltration: Cognitive Threat Analytics uses statistical modeling of an organization's network to identify anomalous web traffic and pinpoint the exfiltration of sensitive data. It recognizes data exfiltration even in HTTPS-encoded traffic, without any need for you to decrypt transferred content
+ Command-and-control (C2) communication: Cognitive Threat Analytics combines a wide range of data, ranging from statistics collected on an Internet-wide level to host-specific local anomaly scores. Combining these indicators inside the statistical detection algorithms allows us to distinguish C2 communication from benign traffic and from other malicious activities. Cognitive Threat Analytics recognizes C2 even in HTTPSencoded or anonymous traffic, including Tor, without any need to decrypt transferred content, detecting a broad range of threats
...
NEW QUESTION # 384
Refer to the exhibit.
What will occur when this device tries to connect to the port?
- A. 802.1X will not work, but MAB will start and allow the device on the network.
- B. 802.1X will not work and the device will not be allowed network access
- C. 802 1X and MAB will both be used and ISE can use policy to determine the access level
- D. 802 1X will work and the device will be allowed on the network
Answer: C
NEW QUESTION # 385
An engineer needs behavioral analysis to detect malicious activity on the hosts, and is configuring the organization's public cloud to send telemetry using the cloud provider's mechanisms to a security device.
Which mechanism should the engineer configure to accomplish this goal?
- A. mirror port
- B. Flow
- C. VPC flow logs
- D. NetFlow
Answer: D
Explanation:
Explanation
https://www.cisco.com/c/en/us/products/collateral/data-center-analytics/tetration-analytics/q-and-a-c67-737402.h
NEW QUESTION # 386
Which Cisco ISE feature helps to detect missing patches and helps with remediation?
- A. posture assessment
- B. authentication policy
- C. enabling probes
- D. profiling policy
Answer: D
NEW QUESTION # 387
......
Latest 350-701 Actual Free Exam Questions Updated 630 Questions: https://dumpscertify.torrentexam.com/350-701-exam-latest-torrent.html
