2021 Latest 350-701 Exam Dumps Recently Updated 358 Questions
Cisco 350-701 Real 2021 Braindumps Mock Exam Dumps
Exam Topics
The candidates for the Cisco 350-701 exam are required to develop a good comprehension of the topics covered in its content before attempting the test. The detailed outline of knowledge and skills measured in the exam can be downloaded from the official website. A brief description of the domains of the 350-701 certification test is provided below:
Security Concepts – 25%
- Describing DNAC APIs for network optimization, provisioning, monitoring, and troubleshooting;
- Describing North Bound & South Bound APIs within the SDN architecture;
- Comparing the site-to-site VPN as well as remote access VPN deployment kinds, including IPsec, sVTI, Cryptomap, FLEXVPN, DMVPN, etc;
- Comparing the most often security vulnerabilities, such as weak and hardcoded passwords, software bugs, SQL injection, path traversal, buffer overflow, missing encryption, and cross-site scripting/forgery;
- Explaining the most common threats against the Cloud as well as on-premises environments;
- Describing the function of the endpoint in the protection of humans from phishing & social engineering attacks;
- Interpreting the elementary Python scripts that are utilized to call Cisco Security appliances APIs.
- Describing the functionality of the cryptography elements, such as encryption, hashing, NAT-T IPv4 for IPsec, SSL, PKI, IPsec, pre-shared key & certificate-based authorization;
- Explaining security intelligence consumption, sharing, and authoring;
NEW QUESTION 184
In which cloud services model is the tenant responsible for virtual machine OS patching?
- A. UCaaS
- B. SaaS
- C. IaaS
- D. PaaS
Answer: C
Explanation:
Only in On-site (on-premises) and IaaS we (tenant) manage O/S (Operating System).
NEW QUESTION 185
What is a feature of Cisco NetFlow Secure Event Logging for Cisco ASAs?
- A. Multiple NetFlow collectors are supported.
- B. Secure NetFlow connections are optimized for Cisco Prime Infrastructure
- C. Advanced NetFlow v9 templates and legacy v5 formatting are supported.
- D. Flow-create events are delayed.
Answer: D
Explanation:
Reference:
NEW QUESTION 186
What is the function of the Context Directory Agent?
- A. accepts user authentication requests on behalf of Web Security Appliance for user identification
- B. reads the Active Directory logs to map IP addresses to usernames
- C. relays user authentication requests from Web Security Appliance to Active Directory
- D. maintains users' group memberships
Answer: B
NEW QUESTION 187
A Cisco ESA administrator has been tasked with configuring the Cisco ESA to ensure there are no viruses before quarantined emails are delivered. In addition, delivery of mail from known bad mail servers must be prevented. Which two actions must be taken in order to meet these requirements? (Choose two)
- A. Scan quarantined emails using AntiVirus signatures
- B. Enable a message tracking service
- C. Use outbreak filters from SenderBase
- D. Deploy the Cisco ESA in the DMZ
- E. Configure a recipient access table
Answer: A,C
Explanation:
Explanation Explanation We should scan emails using AntiVirus signatures to make sure there are no viruses attached in emails. Note: A virus signature is the fingerprint of a virus. It is a set of unique data, or bits of code, that allow it to be identified. Antivirus software uses a virus signature to find a virus in a computer file system, allowing to detect, quarantine, and remove the virus. SenderBase is an email reputation service designed to help email administrators research senders, identify legitimate sources of email, and block spammers. When the Cisco ESA receives messages from known or highly reputable senders, it delivers them directly to the end user without any content scanning. However, when the Cisco ESA receives email messages from unknown or less reputable senders, it performs antispam and antivirus scanning. Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_0100100.html -> Therefore Outbreak filters can be used to block emails from bad mail servers. Web servers and email gateways are generally located in the DMZ so Note: The recipient access table (RAT), not to be confused with remote-access Trojan (also RAT), is a Cisco ESA term that defines which recipients are accepted by a public listener.
Explanation
We should scan emails using AntiVirus signatures to make sure there are no viruses attached in emails.
Note: A virus signature is the fingerprint of a virus. It is a set of unique data, or bits of code, that allow it to be identified. Antivirus software uses a virus signature to find a virus in a computer file system, allowing to detect, quarantine, and remove the virus.
SenderBase is an email reputation service designed to help email administrators research senders, identify legitimate sources of email, and block spammers. When the Cisco ESA receives messages from known or highly reputable senders, it delivers them directly to the end user without any content scanning. However, when the Cisco ESA receives email messages from unknown or less reputable senders, it performs antispam and antivirus scanning.
Reference:
b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_0100100.html
-> Therefore Outbreak filters can be used to block emails from bad mail servers.
Web servers and email gateways are generally located in the DMZ so
Explanation Explanation We should scan emails using AntiVirus signatures to make sure there are no viruses attached in emails. Note: A virus signature is the fingerprint of a virus. It is a set of unique data, or bits of code, that allow it to be identified. Antivirus software uses a virus signature to find a virus in a computer file system, allowing to detect, quarantine, and remove the virus. SenderBase is an email reputation service designed to help email administrators research senders, identify legitimate sources of email, and block spammers. When the Cisco ESA receives messages from known or highly reputable senders, it delivers them directly to the end user without any content scanning. However, when the Cisco ESA receives email messages from unknown or less reputable senders, it performs antispam and antivirus scanning. Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_0100100.html -> Therefore Outbreak filters can be used to block emails from bad mail servers. Web servers and email gateways are generally located in the DMZ so Note: The recipient access table (RAT), not to be confused with remote-access Trojan (also RAT), is a Cisco ESA term that defines which recipients are accepted by a public listener.
NEW QUESTION 188
What is a prerequisite when integrating a Cisco ISE server and an AD domain?
- A. Place the Cisco ISE server and the AD server in the same subnet
- B. Configure a common administrator account
- C. Synchronize the clocks of the Cisco ISE server and the AD server
- D. Configure a common DNS server
Answer: C
Explanation:
The following are the prerequisites to integrate Active Directory with Cisco ISE.
+ Use the Network Time Protocol (NTP) server settings to synchronize the time between the Cisco ISE server and Active Directory. You can configure NTP settings from Cisco ISE CLI.
+ If your Active Directory structure has multidomain forest or is divided into multiple forests, ensure that trust relationships exist between the domain to which Cisco ISE is connected and the other domains that have user and machine information to which you need access. For more information on establishing trust relationships, refer to Microsoft Active Directory documentation.
+ You must have at least one global catalog server operational and accessible by Cisco ISE, in the domain to which you are joining Cisco ISE.
The following are the prerequisites to integrate Active Directory with Cisco ISE.
+ Use the Network Time Protocol (NTP) server settings to synchronize the time between the Cisco ISE server and Active Directory. You can configure NTP settings from Cisco ISE CLI.
+ If your Active Directory structure has multidomain forest or is divided into multiple forests, ensure that trust relationships exist between the domain to which Cisco ISE is connected and the other domains that have user and machine information to which you need access. For more information on establishing trust relationships, refer to Microsoft Active Directory documentation.
+ You must have at least one global catalog server operational and accessible by Cisco ISE, in the domain to which you are joining Cisco ISE.
The following are the prerequisites to integrate Active Directory with Cisco ISE.
+ Use the Network Time Protocol (NTP) server settings to synchronize the time between the Cisco ISE server and Active Directory. You can configure NTP settings from Cisco ISE CLI.
+ If your Active Directory structure has multidomain forest or is divided into multiple forests, ensure that trust relationships exist between the domain to which Cisco ISE is connected and the other domains that have user and machine information to which you need access. For more information on establishing trust relationships, refer to Microsoft Active Directory documentation.
+ You must have at least one global catalog server operational and accessible by Cisco ISE, in the domain to which you are joining Cisco ISE.
Reference:
b_ISE_AD_integration_2x.html#reference_8DC463597A644A5C9CF5D582B77BB24F b_ISE_AD_integration_2x.html#reference_8DC463597A644A5C9CF5D582B77BB24F
NEW QUESTION 189
Drag and drop the NetFlow export formats from the left onto the descriptions on the right.
Answer:
Explanation:
NEW QUESTION 190
Which technology must be used to implement secure VPN connectivity among company branches over a private IP cloud with any-to-any scalable connectivity?
- A. IPsec DVTI
- B. FlexVPN
- C. DMVPN
- D. GET VPN
Answer: D
Explanation:
Explanation Cisco's Group Encrypted Transport VPN (GETVPN) introduces the concept of a trusted group to eliminate point-to-point tunnels and their associated overlay routing. All group members (GMs) share a common security association (SA), also known as a group SA. This enables GMs to decrypt traffic that was encrypted by any other GM. GETVPN provides instantaneous large-scale any-to-any IP connectivity using a group IPsec security paradigm. Reference: https://www.cisco.com/c/dam/en/us/products/collateral/security/group-encrypted-transport-vpn/ GETVPN_DIG_version_2_0_External.pdf
NEW QUESTION 191
Drag and drop the NetFlow export formats from the left onto the descriptions on the right.
Answer:
Explanation:
NEW QUESTION 192
Which feature is supported when deploying Cisco ASAv within AWS public cloud?
- A. IPv6
- B. user deployment of Layer 3 networks
- C. multiple context mode
- D. clustering
Answer: B
Explanation:
The ASAv on AWS supports the following features:
+ Support for Amazon EC2 C5 instances, the next generation of the Amazon EC2 Compute Optimized instance family.
+ Deployment in the Virtual Private Cloud (VPC)
+ Enhanced networking (SR-IOV) where available
+ Deployment from Amazon Marketplace
+ Maximum of four vCPUs per instance
+ User deployment of L3 networks
+ Routed mode (default)
Note: The Cisco Adaptive Security Virtual Appliance (ASAv) runs the same software as physical Cisco ASAs to deliver proven security functionality in a virtual form factor. The ASAv can be deployed in the public AWS cloud.
It can then be configured to protect virtual and physical data center workloads that expand, contract, or shift their location over time. Reference: https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/asav/quick-start-book/asav-96 qsg/asavaws.html The ASAv on AWS supports the following features:
+ Support for Amazon EC2 C5 instances, the next generation of the Amazon EC2 Compute Optimized instance family.
+ Deployment in the Virtual Private Cloud (VPC)
+ Enhanced networking (SR-IOV) where available
+ Deployment from Amazon Marketplace
+ Maximum of four vCPUs per instance
+ User deployment of L3 networks
+ Routed mode (default)
Note: The Cisco Adaptive Security Virtual Appliance (ASAv) runs the same software as physical Cisco ASAs to deliver proven security functionality in a virtual form factor. The ASAv can be deployed in the public AWS cloud.
The ASAv on AWS supports the following features:
+ Support for Amazon EC2 C5 instances, the next generation of the Amazon EC2 Compute Optimized instance family.
+ Deployment in the Virtual Private Cloud (VPC)
+ Enhanced networking (SR-IOV) where available
+ Deployment from Amazon Marketplace
+ Maximum of four vCPUs per instance
+ User deployment of L3 networks
+ Routed mode (default)
Note: The Cisco Adaptive Security Virtual Appliance (ASAv) runs the same software as physical Cisco ASAs to deliver proven security functionality in a virtual form factor. The ASAv can be deployed in the public AWS cloud.
It can then be configured to protect virtual and physical data center workloads that expand, contract, or shift their location over time. Reference: https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/asav/quick-start-book/asav-96 qsg/asavaws.html
NEW QUESTION 193
A customer has various external HTTP resources available including Intranet Extranet and Internet, with a proxy configuration running in explicit mode. Which method allows the client desktop browsers to be configured to select when to connect direct or when to use the proxy?
- A. PAC file
- B. Transport mode
- C. Forward file
- D. Bridge mode
Answer: B
NEW QUESTION 194
A switch with Dynamic ARP inspection enabled has received a spoofed ARP response on a trusted interface. How does the switch behave in this situation?
- A. It forwards the packet without validation.
- B. It drops the packet Without validation.
- C. It forwards the packet after validation by using the MAC Binding Table.
- D. It drops the packet after validation by using the IP & MAC Binding Table.
Answer: D
NEW QUESTION 195
Refer to the exhibit.
What does the number 15 represent in this configuration?
- A. number of possible failed attempts until the SNMPv3 user is locked out
- B. privilege level for an authorized user to this router
- C. interval in seconds between SNMPv3 authentication attempts
- D. access list that identifies the SNMP devices that can access the router
Answer: D
NEW QUESTION 196
An engineer needs to add protection for data in transit and have headers in the email message Which configuration is needed to accomplish this goal?
- A. Deploy an encryption appliance.
- B. Map sender !P addresses to a host interface.
- C. Provision the email appliance
- D. Enable flagged message handling
Answer: A
NEW QUESTION 197
What is the purpose of the certificate signing request when adding a new certificate for a server?
- A. It is the certificate that will be loaded onto the server
- B. It provides the certificate client information so the server can authenticate against it when installing
- C. It provides the server information so a certificate can be created and signed
- D. It is the password for the certificate that is needed to install it with.
Answer: C
Explanation:
Reference:
https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_man_cert.html
NEW QUESTION 198
In which two ways does a system administrator send web traffic transparently to the Web Security Appliance?
(Choose two.)
- A. configure the proxy IP address in the web-browser settings
- B. configure policy-based routing on the network infrastructure
- C. configure Active Directory Group Policies to push proxy settings
- D. reference a Proxy Auto Config file
- E. use Web Cache Communication Protocol
Answer: D,E
NEW QUESTION 199
Which two application layer preprocessors are used by Firepower Next Generation Intrusion Prevention System? (Choose two.)
- A. inline normalization
- B. SIP
- C. modbus
- D. packet decoder
- E. SSL
Answer: A,D
NEW QUESTION 200
What are two rootkit types? (Choose two)
- A. virtual
- B. registry
- C. user mode
- D. buffer mode
- E. bootloader
Answer: C,E
Explanation:
Explanation
The term 'rootkit' originally comes from the Unix world, where the word 'root' is used to describe a user with the highest possible level of access privileges, similar to an 'Administrator' in Windows. The word 'kit' refers to the software that grants root-level access to the machine. Put the two together and you get 'rootkit', a program that gives someone - with legitimate or malicious intentions - privileged access to a computer.
There are four main types of rootkits: Kernel rootkits, User mode rootkits, Bootloader rootkits, Memory rootkits
NEW QUESTION 201
......
Verified 350-701 Exam Dumps Q&As - Provide 350-701 with Correct Answers: https://www.actual4test.com/350-701_examcollection.html
350-701 Exam Questions | Real 350-701 Practice Dumps: https://drive.google.com/open?id=1OTwqwLZIOqy4bl-QYYkcjfO8W5DEDCx_