350-701 Exam Questions

Which Cisco security solution stops exfiltration using HTTPS?

An engineer is adding a Cisco router to an existing environment. NTP authentication is configured on all devices in the environment with the command ntp authentication-key 1 md5 Ci...

Which solution is more secure than the traditional use of a username and password and encompasses at least two of the methods of authentication?

Which feature is used in a push model to allow for session identification host reauthentication and session termination?

An engineer is configuring Cisco WSA and needs to ensure end clients are protected against DNS spoofing attacks. Which deployment method accomplishes this goal?

Which Cisco network security device supports contextual awareness?

An engineer must set up 200 new laptops on a network and wants to prevent the users from moving their laptops around to simplify administration. Which switch port MAC address secur...

Which type of encryption uses a public key and a private key?

Which firewall deployment mode allows inspection of traffic between servers in the same IP subnet?

What are two functionalities of SDN southbound APIs? (Choose two.)

When MAB is configured for use within the 802.1X environment, an administrator must create a policy that allows the devices onto the network. Which information is used for the user...

Which two VPN tunneling protocols support the use of IPsec to provide data integrity, authentication, and data encryption? (Choose two.)

Which Cisco Umbrella package supports selective proxy for inspection of traffic from risky domains?

What are the two distribution methods available to an administrator when performing a fresh rollout of the Cisco AnyConnect Secure Mobility Client? (Choose two.)

An engineer must configure Cisco AMP for Endpoints so that it contains a list of files that should not be executed by users. These files must not be quarantined. Which action meets...

A security audit recently revealed that an administrator is using the same password of C1$c0448845217 for his personal account across multiple systems. What must be implemented by...

When a site-to-site VPN is configured in Cisco FMC, which topology is supported when crypto ACLs are used instead of protected networks to define interesting traffic?

Which solution operates as a cloud-native CASB?

Which entity is responsible for encrypting data in transit using an IaaS model versus a SaaS model?

Which two aspects of the IaaS cloud service model are managed by the service provider? (Choose two.)

Which solution provides end-to-end visibility of applications and insights about application performance?

Drag and Drop Question Refer to the exhibit. An engineer must configure a Cisco switch to perform PPP authentication via a TACACS server located at IP address 10.1.1.10. Authentica...

An administrator needs to be able to have a router securely communicate with a network management system. The connections must be authenticated but not encrypted. While meeting the...

Refer to the exhibit. An engineer must enable secure SSH protocols and enters this configuration. What are two results of running this set of commands on a Cisco router? (Choose tw...

Which algorithm does ISAKMP use to securely derive encryption and integrity keys?

Which two activities are performed using Cisco DNA Center? (Choose two.)

A network administrator is setting up a site-to-site VPN from a Cisco FTD to a cloud environment. After the administrator configures the VPN on both sides, they still cannot reach...

Which two tasks are required when a decryption policy is implemented on a Cisco WSA? (Choose two.)

An organization is using CSR1000v routers in their private cloud infrastructure. They must upgrade their code to address vulnerabilities within their running code version. Who is r...

An organization wants to reduce their attack surface for cloud applications. They want to understand application communications, detect abnormal application behavior, and detect vu...

Which Cisco AnyConnect module is integrated with Splunk Enterprise to provide monitoring capabilities to administrators to allow them to view endpoint application usage?

What describes the function of the crypto isakmp key C1$c451090787 address 0.0.0.0 0.0.0.0 command when configuring an IPsec VPN tunnel on a Cisco IOS router?

Which common threat can be prevented by implementing port security on switch ports?

What is the ideal deployment mode to use when you need to manage separate security policies for multiple customers on a Cisco ASA device?

In which cloud services model is the customer responsible for scanning for and mitigation of application vulnerabilities?

An engineer must modify an existing remote access VPN using a Cisco AnyConnect Secure Mobility client solution and a Cisco Secure Firewall. Currently, all the traffic generate by t...

A network engineer must create an access control list on a Cisco Adaptive Security Appliance firewall. The access control list must permit HTTP traffic to the internet from the org...

Which problem Is solved by deploying a multicontext firewall?

An organization wants to reduce their attach surface for cloud applications. They want to understand application communications, detect abnormal application Behavior, and detect vu...

What is a functional difference between Cisco Secure Endpoint and Cisco Umbrella Roaming Client?

What is the purpose of a denial-of-service attack?

A network administrator is setting up Cisco FMC to send logs to Cisco Security Analytics and Logging (SaaS). The network administrator is anticipating a high volume of logging even...

What is the purpose of the Trusted Automated exchange cyber threat intelligence industry standard?

Which action configures the IEEE 802.1X Flexible Authentication feature lo support Layer 3 authentication mechanisms?

Which Cisco solution provides a comprehensive view of Internet domains, IP addresses, and autonomous systems to help pinpoint attackers and malicious infrastructures?

A security test performed on one of the applications shows that user input is not validated. Which security vulnerability is the application more susceptible to because of this lac...

A network administrator is modifying a remote access VPN on an FTD managed by an FMC. The administrator wants to offload traffic to certain trusted domains. The administrator wants...

What is a benefit of a Cisco Secure Email Gateway Virtual as compared to a physical Secure Email Gateway?

Which method must be used to connect Cisco Secure Workload to external orchestrators at a client site when the client does not allow incoming connections?

Which technology must De used to Implement secure VPN connectivity among company branches over a private IP cloud with any-to-any scalable connectivity?