350-701 Exam Questions

During a recent security audit, a Cisco IOS router with a working IPSEC configuration using IKEv1 was flagged for using a wildcard mask with the crypto isakmp key command. The VPN...

Which command is used to log all events to a destination colector 209.165.201.10?

What is the most commonly used protocol for network telemetry?

What are two functions of IKEv1 but not IKEv2? (Choose two.)

Which threat intelligence standard contains malware hashes?

A company identified a phishing vulnerability during a pentest. What are two ways the company can protect employees from the attack? (Choose two.)

Which Cisco ISE feature helps to detect missing patches and helps with remediation?

Refer to the exhibit. What is the result of using this authentication protocol in the configuration?

Which feature must be configured before implementing NetFlow on a router?

Which term describes when the Cisco Secure Firewall downloads threat intelligence updates from Cisco Tables?

What is a function of Cisco AMP for Endpoints?

An engineer is implementing DHCP security mechanisms and needs the ability to add additional attributes to profiles that are created within Cisco ISE. Which action accomplishes thi...

Which feature requires that network telemetry be enabled?

Refer to the exhibit. When configuring this access control rule in Cisco FMC, what happens with the traffic destined to the DMZjnside zone once the configuration is deployed?

An engineer is trying to decide whether to use Cisco Umbrella, Cisco CloudLock, Cisco Stealthwatch, or Cisco AppDynamics Cloud Monitoring for visibility into data transfers as well...

An engineer needs to detect and quarantine a file named abc123456789.zip based on the MD5 signature of the file using the Outbreak Control list feature within Cisco Advanced Malwar...

With regard to RFC 5176 compliance, how many IETF attributes are supported by the RADIUS CoA feature?

Drag and Drop Question Drag and drop the concepts from the left onto the descriptions on the right. Answer:

For a given policy in Cisco Umbrella, how should a customer block website based on a custom list?

On their laptops around to simplify administration. Which switch port MAC address security setting must be used?

Which Cisco Firewall solution requires zone definition?

A company recently discovered an attack propagating throughout their Windows network via a file named abc428565580xyz exe. The malicious file was uploaded to a Simple Custom Detect...

Which two configurations must be made on Cisco ISE and on Cisco TrustSec devices to force a session to be adjusted after a policy change is made? (Choose two)

An engineer is configuring Cisco WSA and needs to deploy it in transparent mode. Which configuration component must be used to accomplish this goal?

Which feature is used in a push model to allow for session identification, host reauthentication, and session termination?

An engineer needs to configure a Cisco Secure Email Gateway (SEG) to prompt users to enter multiple forms of identification before gaining access to the SEG. The SEG must also join...

An engineer recently completed the system setup on a Cisco WSA. Which URL information does the system send to SensorBase Network servers?

Why should organizations migrate to a multifactor authentication strategy?

What is the function of the crypto isakmp key cisc406143794 address 0.0.0.0 0.0.0.0 command when establishing an IPsec VPN tunnel?

Client workstations are experiencing extremely poor response time. An engineer suspects that an attacker is eavesdropping and making independent connections while relaying messages...

An administrator is testing new configuration on a network device. The network device had a previously established association with the NTP server but is no longer processing time...

What does Cisco ISE use to collect endpoint attributes that are used in profiling?

Which two Cisco ISE components enforce security policies on noncompliant endpoints by blocking network access? (Choose two.)

Which Cisco security solution gives the most complete view of the relationships and evolution of Internet domains, IPs, and files, and helps to pinpoint attackers' infrastructures...

Which two commands are required when configuring a flow-export action on a Cisco ASA? (Choose two.)

What are two benefits of using an MDM solution? (Choose two.)

Which VPN provides scalability for organizations with many remote sites?

Which Cisco security solution secures public, private, hybrid, and community clouds?

What is the target in a phishing attack?

A university policy must allow open access to resources on the Internet for research, but internal workstations are exposed to malware. Which Cisco AMP feature allows the engineeri...

Which action must be taken in the AMP for Endpoints console to detect specific MD5 signatures on endpoints and then quarantine the files?

Drag and Drop Question A network engineer is configuring NetFlow top talkers on a Cisco router. Drag and drop the steps in the process from the left into the sequence on the right....

Refer to the exhibit. Which command results in these messages when attempting to troubleshoot an IPsec VPN connection?

Which technology provides a combination of endpoint protection, endpoint detection, and response?

Which industry standard is used to integrate Cisco ISE and Cisco pxGrid to each other and with other interoperable security platforms?

What is a functional difference between Cisco AMP for Endpoints and Cisco Umbrella Roaming Client?

An organization is moving toward the zero-trust model. Which Cisco solution enables administrators to deploy and control microsegmentation of endpoints that are connected to a Cisc...

An engineer is deploying Cisco Advanced Malware Protection (AMP) for Endpoints and wants to create a policy that prevents users from executing a file named abc123456789.exe without...

An organization is using DNS services for their network and want to help improve the security of the DNS infrastructure. Which action accomplishes this task?

Which Cisco security solution provides patch management in the cloud?