350-701 Exam Questions
916 real 350-701 exam questions with expert-verified answers and explanations. Page 11 of 19.
- Question #503
Which two authentication protocols are supported by the Cisco WSA? (Choose two.)
Cisco WSAAuthentication protocols - Question #504
When a Cisco Secure Web Appliance checks a web request, what occurs if it is unable to match a user-defined policy?
Cisco WSAWeb PolicyPolicy PrecedenceGlobal Policy - Question #505
Which Cisco solution extends network visibility, threat detection, and analytics to public cloud environments?
Cisco Stealthwatch CloudCloud security monitoringThreat detectionNetwork visibility - Question #506Secure Network Access, Visibility, and Enforcement
Which metric is used by the monitoring agent to collect and output packet loss and jitter information?
RTPPacket LossJitterNetwork Monitoring - Question #507
Which two criteria must a certificate meet before the Cisco Secure Web Appliance uses it to decrypt application traffic? (Choose two.)
Cisco SWASSL decryptioncertificate trustcertificate requirements - Question #508
What are two benefits of using Cisco Duo as an MFA solution? (Choose two.)
Cisco DuoMulti-factor AuthenticationSingle Sign-OnApplication Security - Question #509
How does Cisco Workload Optimization portion of the network do EPP solutions solely performance issues?
Cisco Workload OptimizationPerformance optimizationResource resizing - Question #510
What are two benefits of using an MDM solution? (Choose two.)
MDM benefitsMobile Device ManagementEndpoint management - Question #511
A company has 5000 Windows users on its campus. Which two precautions should IT take to prevent WannaCry ransomware from spreading to all clients? (Choose two.)
Ransomware preventionNetwork segmentationEndpoint complianceNetwork Access Control - Question #512
What provides total management for mobile and PC including managing inventory and device tracking, remote view, and live troubleshooting using the included native remote desktop su...
Mobile Device ManagementEndpoint ManagementDevice TrackingRemote Troubleshooting - Question #513
What is the process In DevSecOps where all changes In the central code repository are merged and synchronized?
DevSecOpsContinuous IntegrationCI/CD - Question #514
Based on the NIST 800-145 guide, which cloud architecture may be owned, managed, and operated by one or more of the organizations in the community, a third party, or some combinati...
NIST 800-145Cloud deployment modelsCommunity cloud - Question #515Visibility and Enforcement
Which type of data does the Cisco Stealthwatch system collect and analyze from routers, switches, and firewalls?
Cisco StealthwatchNetFlowNetwork data collection - Question #516
What is the most common type of data exfiltration that organizations currently experience?
Data exfiltrationCommon attack vectorsNetwork share vulnerabilitiesThreat intelligence - Question #517
Which security solution is used for posture assessment of the endpoints in a BYOD solution?
Cisco ISEPosture assessmentBYOD security - Question #518Cloud Security
An engineer is configuring Dropbox integration with Cisco Cloudlock. Which action must be taken before granting API access in the Dropbox admin console?
Cisco CloudlockDropbox integrationAPI access configurationCASB - Question #5195.0 Endpoint Security and Visibility
How does Cisco Secure Endpoint provide next-generation protection?
Cisco Secure EndpointEPPEDRNext-gen endpoint protection - Question #520Content Security
Which two protocols must be configured to authenticate end users to the Cisco WSA? (Choose two.)
Cisco WSAUser AuthenticationNTLMSSPKerberos - Question #521
Which VMware platform does Cisco ACI integrate with to provide enhanced visibility, provide policy integration and deployment, and implement security policies with access lists?
Cisco ACIVMware integrationvRealizePolicy management - Question #522N/A
What is a benefit of using Cisco Umbrella?
Cisco UmbrellaDNS securityThreat preventionCloud security - Question #523
Which solution allows an administrator to provision, monitor, and secure mobile devices on Windows and Mac computers from a centralized dashboard?
Cisco ISEEndpoint managementNetwork Access ControlMobile device security - Question #524
What is the term for the concept of limiting communication between applications or containers on the same node?
MicrosegmentationContainer securityNetwork segmentation - Question #525Secure Network Access, Visibility, and Enforcement
Which Cisco platform onboards the endpoint and can issue a CA signed certificate while also automatically configuring endpoint network settings to use the signed endpoint certifica...
Cisco ISEEndpoint OnboardingNetwork Access ControlCertificate Authentication - Question #526Understanding and Using APIs
What are two characteristics of the RESTful architecture used within Cisco DNA Center? (Choose two.)
REST APIAPI architecture - Question #527
Which cloud service offering allows customers to access a web application that is being hosted, managed, and maintained by a cloud service provider?
SaaSCloud Service ModelsCloud Computing Basics - Question #528
Which characteristic is unique to a Cisco WSAv as compared to a physical appliance?
Cisco WSAvVirtual applianceLicensingAppliance form factors - Question #529Network Security
An administrator is configuring NTP on Cisco ASA via ASDM and needs to ensure that rogue NTP servers cannot insert themselves as the authoritative time source. Which two steps must...
NTP AuthenticationAccess ControlNetwork Time ProtocolASA Security - Question #530
What is a characteristic of an EDR solution and not of an EPP solution?
EDREPPEndpoint SecurityThreat Detection - Question #531Content Security
Email security has become a high priority task for a security engineer at a large multi-national organization due to ongoing phishing campaigns. To help control this, the engineer...
URL reputation filteringEmail content securityLink defangingCisco ESA - Question #532
What are two workload security models? (Choose two.)
Workload modelsSaaSOn-premises - Question #533Security Concepts
Refer to the exhibit. What function does the API key perform while working with https://api.amp.cisco.com/v1/computers?
API KeyHTTP AuthenticationCisco AMP API - Question #534
What is a benefit of using GET VPN over FlexVPN within a VPN deployment?
GET VPNFlexVPNVPN technologies - Question #535
An engineer enabled SSL decryption for Cisco Umbrella intelligent proxy and needs to ensure that traffic is inspected without alerting end-users. Which action accomplishes this goa...
Cisco UmbrellaSSL InspectionRoot CAClient Trust Store - Question #536Infrastructure Security - Understanding IPsec VPN cryptographic components including encryption (confidentiality) algorithms such as 3DES and AES versus integrity/authentication algorithms such as MD5-HMAC and SHA-HMAC, commonly tested in CCNA, CompTIA Security+, and related certifications.
Drag and Drop Question Drag and drop the cryptographic algorithms for IPsec from the left onto the cryptographic processes on the right. Answer:
IPsecCryptographic AlgorithmsVPNNetwork Security - Question #537
DoS attacks are categorized as what?
DoS attacksFlood attacksAttack types - Question #538
Which capability is provided by application visibility and control?
Application Visibility and ControlDeep Packet Inspection - Question #539
What is offered by an EPP solution but not an EDR solution?
EPPEDREndpoint SecurityThreat Sandboxing - Question #540
Which Cisco solution integrates Encrypted Traffic Analytics to perform enhanced visibility, promote compliance,shorten response times, and provide administrators with the informati...
Encrypted Traffic AnalyticsCisco Catalyst CenterNetwork visibilityNetwork security management - Question #541Cloud Security
Which feature does the laaS model provide?
IaaSCloud Service Models - Question #542Secure Network Access, Visibility, and Enforcement
What is a benefit of flexible NetFlow records?
Flexible NetFlowTraffic monitoringNetwork visibility - Question #543Endpoint Protection and Visibility
What is the purpose of the Cisco Endpoint loC feature?
Cisco Endpoint SecurityIoCIncident Response - Question #544
In which two customer environments is the Cisco WSAv connector traffic direction method selected? (Choose two.)
Cisco WSAv deploymentWSA traffic redirectionExplicit ProxyWCCP - Question #545Content Security
In which two ways does the Cisco Advanced Phishing Protection solution protect users? (Choose two.)
Cisco Advanced Phishing ProtectionPhishing protectionEmail security - Question #546
What is the purpose of the Cisco Endpoint IoC feature?
Cisco Endpoint IoCEndpoint SecurityIncident Response - Question #547
What are two recommended approaches to stop DNS tunneling for data exfiltration and command and control call backs? (Choose two.)
DNS tunneling preventionData exfiltrationC2 preventionDNS security - Question #548Content Security
Which two authentication schemes does Active Directory use for transparent user identification on the Cisco Secure Web Appliance? (Choose two.)
Active Directory authenticationKerberosNTLMCisco Secure Web Appliance - Question #549Software-Defined Networking
Which type of API is being used when a controller within a software-defined network architecture dynamically makes configuration changes on switches within the network?
SDN architectureSouthbound APIController-device communication - Question #550Cloud Concepts
Based on the NIST 800-145 guide, which cloud architecture is provisioned for exclusive use by a specific group of consumers from different organizations and may be owned, managed,...
Cloud deployment modelsCommunity cloudNIST 800-145 - Question #551
Which two capabilities does an MDM provide? (Choose two.)
MDM capabilitiesDevice managementSecurity policy enforcement - Question #552
Which Secure Email Gateway implementation method segregates inbound and outbound email?
Secure Email GatewayEmail segregationSEG listener configuration