350-701 Exam Questions

What is a feature of NetFlow Secure Event Logging?

A hacker initiated a social engineering attack and stole username and passwords of some users within a company. Which product should be used as a solution to this problem?

Which technology provides the benefit of Layer 3 through Layer 7 innovative deep packet inspection, enabling the platform to identify and output various applications within the net...

Which RADIUS feature provides a mechanism to change the AAA attributes of a session after it is authenticated?

Which type of data exfiltration technique encodes data in outbound DNS requests to specific servers and can be stopped by Cisco Umbrella?

A large organization wants to deploy a security appliance in the public cloud to form a site-to-site VPN and link the public cloud environment to the private cloud in the headquart...

Which CLI command is used to enable URL filtering support for shortened URLs on the Cisco Secure Email Gateway?

Which standard is used to automate exchanging cyber threat information?

What is a function of the Layer 4 Traffic Monitor on a Cisco WSA?

A network engineer entered the snmp-server user asmith myv7 auth sha cisco priv aes 256 cisc0xxxxxxxxx command and needs to send SNMP information to a host at 10.255.255.1. Which c...

Refer to the exhibit. What are two indications of the Cisco Firepower Services Module configuration? (Choose two.)

Why is it important for the organization to have an endpoint patching strategy?

An email administrator is setting up a new Cisco Secure Email Gateway. The administrator wants to enable the blocking of greymail for the end user. Which feature must the administr...

What limits communication between applications or containers on the same node?

Which open source tool does Cisco use to create graphical visualizations of network telemetry on Cisco IOS XE devices?

How does the Cisco WSA enforce bandwidth restrictions for web applications?

Which two components do southbound APIs use to communicate with downstream devices? (Choose two.)

What is the term for when an endpoint is associated to a provisioning WLAN that is shared with guest access, and the same guest portal is used as the BYOD portal?

Which feature within Cisco ISE verifies the compliance of an endpoint before providing access to the network?

Which MDM configuration provides scalability?

Which Cisco ISE service checks the compliance of endpoints before allowing the endpoints to connect to the network?

Which endpoint protection and detection feature performs correlation of telemetry, files, and intrusion events that are flagged as possible active breaches?

Which feature enables a Cisco ISR to use the default bypass list automatically for web filtering?

A network engineer has configured a NTP server on a Cisco ASA. The Cisco ASA has IP reachability to the NTP server and is not filtering any traffic. The show ntp association detail...

When a next-generation endpoint security solution is selected for a company, what are two key deliverables that help justify the implementation? (Choose two.)

What is the process of performing automated static and dynamic analysis of files in an isolated environment against preloaded behavioral indicators for threat analysis?

Which solution is made from a collection of secure development practices and guidelines that developers must follow to build secure applications?

What do tools like Jenkins, Octopus Deploy, and Azure DevOps provide in terms of application and infrastructure automation?

Which direction do attackers encode data in DNS requests during exfiltration using DNS tunneling?

Which Cisco DNA Center RESTful PNP API adds and claims a device into a workflow?

What is a feature of container orchestration?

What are two security benefits of an MDM deployment? (Choose two.)

An organization is implementing AAA for their users. They need to ensure that authorization is verified for every command that is being entered by the network administrator. Which...

What is the recommendation in a zero-trust model before granting access to corporate applications and resources?

Which Cisco AMP feature allows an engineer to look back to trace past activities, such as file and process activity on an endpoint?

Which solution stops unauthorized access to the system if a user's password is compromised?

What is a benefit of using Cisco Tetration?

How does Cisco Umbrella protect clients when they operate outside of the corporate network?

Which API method and required attribute are used to add a device into Cisco DNA Center with the native API?

What are two facts about WSA HTTP proxy configuration with a PAC file? (Choose two.)

Which solution should be leveraged for secure access of a CI/CD pipeline?

Which function is included when Cisco AMP is added to web security?

A small organization needs to reduce the VPN bandwidth load on their headend Cisco ASA in order to ensure that bandwidth is available for VPN users needing access to corporate reso...

Which solution detects threats across a private network, public clouds, and encrypted traffic?

Which Cisco security solution integrates with cloud applications like Dropbox and Office 365 while protecting data from being exfiltrated?

Drag and Drop Question Drag and drop the exploits from the left onto the type of security vulnerability on the right. Answer:

When network telemetry is implemented, what is important to be enabled across all network infrastructure devices to correlate different sources?

Drag and Drop Question Drag and drop the Cisco CWS redirection options from the left onto the capabilities on the right. Answer:

What is the concept of continuous integration/continuous delivery pipelining?

Drag and Drop Question Drag and drop the features of Cisco ASA with Firepower from the left onto the benefits on the right. Answer: