350-701 Exam Questions

Which two devices support WCCP for traffic redirection? (Choose two.)

Which two types of connectors are used to generate telemetry data from IPFIX records in a Cisco Secure Workload implementation? (Choose two.)

What is a difference between GRE over IPsec and IPsec with crypto map?

A network administrator has configured TACACS on a network device using the key Cisc0467380030 tor authentication purposes. However, users are unable to authenticate. TACACS server...

What must be configured on Cisco Secure Endpoint to create a custom detection tile list to detect and quarantine future files?

What is the default action before identifying the URL during HTTPS inspection in Cisco Secure Firewall Threat Defense software?

A security engineer must add destinations into a destination list in Cisco Umbrella. What describes the application of these changes?

Which file type is supported when performing a bulk upload of destinations into a destination list on Cisco Umbrella?

An engineer is configuring a Cisco Secure Email Cloud Gateway instance to send logs to an external server for auditing. For security purposes, a username and SSH key with the finge...

An engineer configured 802.1X authentication on a switch port but cannot authenticate. Which action must the engineer take to validate if the user credentials are correct?

Which feature only implements on the Cisco ASA in the transparent mode?

An engineer is configuring Cisco Secure Web Appliance and needs to deploy it in transparent mode. Which configuration component must be used to accomplish this goal?

Which two algorithms must be used when an engineer is creating a connection that will have classified data across it? (Choose two.)

Which process is used to obtain a certificate from a CA?

Which two methods are valid to be included in an authentication method list? (Choose two.)

A network administrator is shipping a Cisco ASA to a remote retail site. The administrator wants to ensure that the device configuration cannot be accessed by someone at the site w...

Which two products are used to forecast capacity needs accurately in real time? (Choose two.)

A Cisco Secure Cloud Analytics administrator is setting up a private network monitor sensor to monitor an on-premises environment. Which two pieces of information from the sensor a...

Refer to the exhibit. An administrator is configuring a VPN tunnel on a Cisco router. The information provided by the administrator of the remote end of the VPN tunnel was that IKE...

Which attack gives unauthorized access to files on the web server?

A network administrator needs a solution to match traffic and allow or deny the traffic based on the type of application, not just the source or destination address and port used....

What is a benefit of using Cisco CWS compared to an on-premises Cisco Secure Web Appliance?

Which key feature of Cisco ZFW is unique among other Cisco IOS firewall solutions?

Which Cisco solution secures the cloud users, data and applications with the cloud-native CASB and cloud cybersecurity platform?

What are the components of endpoint protection against social engineering attacks?

Which feature is used to restrict communication between interfaces on a Cisco ASA?

Refer to the exhibit. Logins from internal users to a Cisco Adaptive Security Appliance firewall must be performed by using a TACACS server. The firewall is already configured. Whi...

A network engineer must create a workflow to detect when a device joins a network and send the onboarding configuration to the device by using the Cisco DNA Center API. Which two m...

Which IPsec mode must be used when encrypting data over a public network between two servers with RFC1918 IP addresses?

Which platform uses Cyber Threat Intelligence as its main source of information?

Refer to the exhibit. Which task is the Python script performing by using the Umbrella Enforcement API?

Which security mechanism is designed to protect against "offline brute-force" attacks?

Which method is used on a Cisco IOS router to redirect traffic to the Cisco Secure Web Appliance for URL inspection?

Which two global commands must the network administrator implement to limit the attack surface of an internet-facing Cisco router? (Choose two.)

Refer to the exhibit. An engineer created a policy named usera1 on a Cisco Secure Email Gateway to enable the antispam feature for an email address of [email protected]. Which confi...

Which Cisco firewall solution supports configuration via Cisco Policy Language?

A network administrator has configured DHCP snooping on a Cisco switch to prevent unauthorized DHCP servers from assigning IP addresses. During configuration, a device with MAC add...

What are two examples of code injection vulnerabilities? (Choose two.)

What is a feature of an endpoint detection and response solution?

An engineer is deploying a Cisco Secure Email Gateway and must ensure it reaches the Cisco update servers to retrieve new rules. The engineer must now manually configure the Outbre...

A website administrator wants to prevent SQL injection attacks against the company's customer database, which is referenced by the web server. Which two methods help prevent SQL in...

An engineer is configuring DHCP on a Cisco switch and wants to ensure that a DHCP packet will be dropped. Under which condition will this occur?

An engineer is configuring guest WLAN access using Cisco ISE and the Cisco WLC. Which action temporarily gives guest endpoints access dynamically while maintaining visibility into...

An engineer needs to configure cloud logging on Cisco ASA with SAL integration. Which parameter must be considered for this configuration?

Which Cisco platform processes behavior baselines, monitors for deviations, and reviews for malicious processes in data center traffic and servers while performing software vulnera...

A network administrator has installed Secure Endpoint in the network. During setup it was noticed an endpoint has been exhibiting unusual behavior, including slow performance and u...

What are two targets in cross-site scripting attacks? (Choose two.)

Which component performs the resolution between the tunnel address and mGRE address in DMVPN?

Refer to the exhibit. A network engineer must retrieve the interface configuration on a Cisco router by using the NETCONF API. The engineer uses a Python script to automate the act...

What is a difference between encrypted passwords and hardcoded passwords?