350-701 Exam Questions

Which action adds IOCs to customize detections for a new attack?

A network administrator received a critical message alert from a Cisco Secure Web Appliance stating that the log partition is at 107% capacity. How does a Cisco Secure Web Applianc...

A network administrator has configured TACACS on a network device using the key Cisc0466974274 for authentication purposes. However, users are unable to authenticate. TACACS server...

How do the features of DMVPN compare to IPsec VPN?

What has driven an increase in the need for endpoint-based security?

Drag and Drop Question Drag and drop the firewall capabilities from the left onto the corresponding firewall deployment modes on the right. Answer:

An engineer must register a fixed network on a Cisco Umbrella platform. Which two actions must be performed when adding a new public IP address? (Choose two.)

Which action configures the iEEE 802.1X Flexible Authentication feature to support Layer 3 authentication mechanisms?

Which API technology with SDN architecture is used to communicate with a controller and network devices such as routers and switches?

Which solution should a network administrator deploy to protect a webserver from SQL injection attacks?

What is a capability of Cisco AVC?

Which parameter must be set for an invalid certificate handling on a Cisco Seucure Web Appliance with a policy for HTTPS traffic?

A networking team must harden an organization's network from VLAN hopping attacks. The team disables Dynamic Trunking Protocol and puts any unused ports in an unused VLAN. A trunk...

A network engineer configures a site-to-site VPN with a colleague. During testing, the engineer discovers that only phase 1 is up, and application traffic cannot pass. Which config...

An engineer is deploying a Cisco Email Security Appliance and must configure a sender group that decides which mail policy will process the mail. The configuration must accept inco...

Refer to the exhibit. A network engineer wants to reduce the operational costs of SNMPv3 by using trapping instead of polling. Which code snippet completes the configuration to ena...

What is the definition of phishing?

What is capability of EPP compared to EDR?

What is considered a cloud data breach?

Which type of attack does multifactor authentication help protect against?

An engineer must use Cisco Secure Firewall Management Center to send Cisco Secure Firewall Threat Defense events to the cloud. The engineer performed these actions already: - FTD d...

What is a benefit of using Cisco AVC (Application Visibility and Control) for application control?

What is the purpose of CA in a PKI?

An engineer is onboarding a teleworker to Cisco Umbrella. After the worker's home network identity is configured, which additional action must be taken to complete the network regi...

What must be disabled on a Cisco Secure Web Appliance to ensure HTTPS traffic with a good reputation score bypasses decryption?

A network engineer must use the Cisco DNA Center API to create a configuration template to provision a device. Which two method and endpoint pairs must be used to create the templa...

Which two facts must be considered when deciding whether to deploy the Cisco Secure Web Appliance in Standard mode, Hybrid Web Security mode, or Cloud Web Security Connector mode?...

An engineer must modify an existing remote access VPN using a Cisco AnyConnect Secure Mobility client solution and a Cisco Secure Firewall. Currently, all the traffic generated by...

An engineer must configure a Cisco Secure Email Gateway to use DLP for a company. The company also wants to see the content of emails that violate the DLP policy. Which configurati...

Which email security feature protects users from phishing attempts?

Refer to the exhibit. Which protocol should be used to encrypt a client connection that signs in to the router remotely to make common configuration changes?

An organization is trying to implement micro-segmentation on the network and wants to be able to gain visibility on the applications within the network. The solution must be able t...

How does a Cisco Secure Firewall help to lower the risk of exfiltration techniques that steal customer data?

Refer to the exhibit. Which task is the Python script performing by using the Cisco Umbrella API?

Refer to the exhibit. A network engineer must implement a new multidevice management solution and must retrieve information about all the Cisco devices that are directly attached t...

Refer to the exhibit. Network access control is implemented on the LAN and an engineer must now configure the switch port level so that users with new corporate devices can connect...

What is a difference between an EPP solution and an EDR solution?

A company is planning to deploy an application to a secure cloud environment. The solution must meet these requirements: - A third-party must control the underlying cloud infrastru...

An organization plans to upgrade its current email security solutions, and an engineer must deploy Cisco Secure Email. The requirements for the upgrade are: - Implement Data Loss P...

Which Cisco ISE service checks the state of all the endpoints connecting to a network for compliance with corporate security policies?

What is a difference between an SQL injection and a cross-site scripting attack?

What is a capability of Cisco Secure Email Cloud Gateway compared to Cisco Secure Email Gateway?

An engineer must prevent communication with a cloud application being decrypted. The application database uses AES-256 with SHA-512 and web access to the application uses HTTPS wit...

Which action blocks specific IP addresses whenever a computer with Cisco Secure Endpoint installed connects to the network?

An organization has had some malware infections recently and the management team wants to use Cisco Secure Firewall to enforce file policies to prevent malicious files from being d...

Which Cisco solution integrates industry-leading artificial intelligence and machine learning analytics and an assurance database to review the security posture and maintain visibi...

An engineer is configuring cloud logging on Cisco ASA and needs events to compress. Which component must be configured to accomplish this goal?

When an assessment of cloud services and applications is conducted, which tool is used to show user activity and data usage across the applications?

An engineer implements Cisco CloudLock to secure a Microsoft Office 365 application in the cloud. The engineer must configure protection for corporate files in case of any incident...

Which common exploit method is TLS 1.3 designed to prevent?