350-701 Exam Questions

After a security incident, an engineer must propose a solution to secure management traffic better. The engineer must ensure that remote access is maintained in case the internet f...

How does Cisco Secure Endpoint exclude server IP addresses and ports from detection?

How does a cross-site request forgery attack operate?

An engineer must protect data hosted in the cloud by using Cisco CloudLock data loss protection policies. The engineer uses a predefined policy for the configuration and needs the...

A network engineering team wants to configure web reputation URL filtering in Cisco vManage by setting the web reputation threshold. Which value represents the most secure configur...

A networking team must harden an organization's core switch against man-in-the-middle attacks. The team must use Dynamic ARP Inspection (DAI) on the switch to meet the security ser...

What is an advantage of FlexVPN when compared to DMVPN?

Drag and Drop Question An engineer must modify the Global Access Policy on a Cisco Secure Web Appliance. Blocked URLs must now be set to Monitor instead of Block. Drag and drop the...

An engineer wants to assign a printer to a different VLAN than what is statically configured on the switch port. Which CoA type should the engineer use?

An engineer must create a new custom URL on a Cisco Secure Web Appliance to block cisco.com and all its subdomains. The engineer performs these actions: - Create a new custom URL c...

What is a characteristic of a man-in-the-middle attack?

An engineer is configuring a new destination list for Cisco Umbrella. The destination list is in Microsoft Excel format and contains many domains. Which two actions must be taken t...

A company named Org.Co plans to migrate a messaging app to a software as a service offering. A security engineer must protect data-at-rest and data in transit, and the solution mus...

An engineer is implementing a network access control solution for a client. The client has separate data and voice VLANs and the deployment is now entering the testing phase. Which...

Refer to the exhibit. Which task is the Python script performing by using the Cisco Umbrella API?

What is a capability of the Cisco ISE guest service in the web-based portal?

Which network technology does Cisco Next-Generation Firewall replace?

Refer to the exhibit. An engineer is deploying an incoming mail policy. When [email protected] sends an email to [email protected], the policy must drop any emails suspected of bei...

Refer to the exhibit. A security engineer must create a new VIP user group on a Cisco Secure Endpoint device. To automate the procedure, a Python script is used. Which code snippet...

What is a characteristic of Trusted Automated eXchange of Indicator Information?

Which component is included in a zero-trust architecture model?

What is a difference between weak passwords and missing encryption?

What is Cisco Talos Intelligence?

What is Cisco Talos?

What is a difference between SQL injection and buffer overflow attacks?

What is an attribute of Structured Threat Information eXpression?

How is an amplification DDoS attack performed?

What is a capability of a Cisco Next-Generation Firewall?

A network engineer must establish a site-to-site VPN between two Cisco routers using IPsec. The engineer creates an access control list to permit the traffic, configures phase 1 an...

Refer to the exhibit. An engineer must configure a site-to-site VPN connection between SiteA and SiteB. The engineer already performed some configuration on the Cisco Adaptive Secu...

Refer to the exhibit. A network engineer configures a network on a Cisco switch that has interVLAN routing where PC1 belongs to VLAN10 and PC2 belongs to VLAN20. Which action shoul...

What is a difference between a Cisco Adaptive Security Appliance firewall and a zone-based firewall?

Drag and Drop Question Refer to the exhibit. An engineer must configure dynamic NAT on a Cisco Adaptive Security Appliance firewall so that when inside users connect to an outside...

Which interface mode does a Cisco Secure IPS device use to block suspicious traffic?

What is an advantage of using a next-generation firewall compared to a traditional firewall?

A network administrator must configure remote access to a Cisco ASA. The administrator configures an identity certificate, uploads the SSL VPN client image to the Cisco ASA, and en...

A security engineer is tasked with configuring TACACS on a Cisco ASA firewall. The engineer must be able to access the firewall command line interface remotely. The authentication...

An administrator is implementing management plane protection and must configure an interface on a Cisco router to only terminate management packets that are destined for the router...

Which firewall mode does a Cisco Adaptive Security Appliance use to inspect Layer 2 traffic?

What does an IPS use to receive network traffic without modifying the traffic?

Which feature is used to configure an encrypted route-based site-to-site VPN from a Cisco router to a cloud environment?

What is a capability of a Cloud Access Security Broker?

An engineer must configure a destination list on Cisco Umbrella. The destination list must allow requests to test.domain.com and block any other URLs to .domain.com. Which configur...

In which scenario is downloading Umbrella Dynamic IP Updater a configuration step?

An engineer migrates a web server to the cloud in a platform as a service model. Which security measure must be implemented next to protect the resources?

A company deploys an application that contains confidential data and has a hybrid hub-and- spoke topology. The hub resides in a public cloud environment, and the spoke resides on-...

A network administrator wants to deploy a Secure Web Appliance to protect users even when they are outside of the corporate environment. The destination IP and port of all packets...

platform. An engineer must secure the website because the company has experienced a recent increase in DoS, DDoS, cross-site scripting, and SQL injection attacks. Which security so...

An engineer is configuring Outbreak Filters for a Cisco Secure Email Gateway to protect a network from large-scale virus outbreaks and phishing scams. Any URLs that match the filte...

Which capability of Cisco Secure Endpoint for Email Security protects users from sophisticated phishing attacks?