350-701 Exam Questions

Which feature requires a network discovery policy on the Cisco Firepower Next Generation Intrusion Prevention System?

Refer to the exhibit. Which statement about the authentication protocol used in the configuration is true?

Which two preventive measures are used to control cross-site scripting? (Choose two.)

Which policy is used to capture host information on the Cisco Firepower Next Generation Intrusion Prevention System?

Refer to the exhibit. Which command was used to generate this output and to show which ports are authenticating with dot1x or mab?

An engineer is configuring a Cisco Secure Email Gateway and wants to control whether to accept or reject email messages to a recipient address. Which list contains the allowed reci...

Which two capabilities does TAXII support? (Choose two.)

Which policy represents a shared set of features or parameters that define the aspects of a managed device that are likely to be similar to other managed devices in a deployment?

An administrator wants to ensure that all endpoints are compliant before users are allowed access on the corporate network. The endpoints must have the corporate antivirus applicat...

What are two Detection and Analytics Engines of Cognitive Threat Analytics? (Choose two.)

In which form of attack is alternate encoding, such as hexadecimal representation, most often observed?

Which two conditions are prerequisites for stateful failover for IPsec? (Choose two.)

What Cisco command shows you the status of an 802.1X connection on interface gi0/1?

A malicious user gained network access by spoofing printer connections that were authorized using MAB on four different switch ports at the same time. What two catalyst switch secu...

Which feature of Cisco ASA allows VPN users to be postured against Cisco ISE without requiring an inline posture node?

What is the result of running the crypto isakmp key ciscXXXXXXXX address 172.16.0.0 command?

Which two probes are configured to gather attributes of connected endpoints using Cisco Identity Services Engine? (Choose two.)

Which solution protects hybrid cloud deployment workloads with application visibility and segmentation?

What are the two most commonly used authentication factors in multifactor authentication? (Choose two.)

Which two key and block sizes are valid for AES? (Choose two.)

After deploying a Cisco Secure Email Gateway on your network, you notice that some messages fail to reach their destinations. Which task can you perform to determine where each mes...

Elliptic curve cryptography is a stronger more efficient cryptography method meant to replace which current encryption technology?

How is ICMP used an exfiltration technique?

What is the difference between deceptive phishing and spear phishing?

An engineer needs a solution for TACACS+ authentication and authorization for device administration. The engineer also wants to enhance wired and wireless network security by requi...

When wired 802.1X authentication is implemented, which two components are required? (Choose two.)

The Cisco ASA must support TLS proxy for encrypted Cisco Unified Communications traffic. Where must the ASA be added on the Cisco UC Manager platform?

Which API is used for Content Security?

Which two behavioral patterns characterize a ping of death attack? (Choose two.)

Which two mechanisms are used to control phishing attacks? (Choose two.)

When web policies are configured in Cisco Umbrella, what provides the ability to ensure that domains are blocked when they host malware, command and control, phishing, and more thr...

What two mechanisms are used to redirect users to a web portal to authenticate to ISE for guest services? (Choose two.)

Which flaw does an attacker leverage when exploiting SQL injection vulnerabilities?

Which deployment model is the most secure when considering risks to cloud adoption?

What does the Cloudlock Apps Firewall do to mitigate security concerns from an application perspective?

What is the primary benefit of deploying an ESA in hybrid mode?

Which option is the main function of Cisco Firepower impact flags?

Which two deployment modes does the Cisco ASA FirePOWER module support? (Choose two.)

Drag and Drop Question Drag and drop the Firepower Next Generation Intrusion Prevention System detectors from the left onto the correct definitions on the right. Answer:

Drag and Drop Question Drag and drop the capabilities from the left onto the correct technologies on the right. Answer:

Drag and Drop Question Drag and drop the descriptions from the left onto the correct protocol versions on the right. Answer:

Which Cisco solution does Cisco Umbrella integrate with to determine if a URL is malicious?

What is the purpose of the Decrypt for Application Detection feature within the WSA Decryption options?

What is the primary role of the Cisco Email Security Appliance?

Which two features of Cisco DNA Center are used in a Software Defined Network solution? (Choose two.)

Which exfiltration method does an attacker use to hide and encode data inside DNS requests and queries?

Which algorithm provides encryption and authentication for data plane communication?

How does Cisco Umbrella archive logs to an enterprise-owned storage?

In which cloud services model is the tenant responsible for virtual machine OS patching?

Which two descriptions of AES encryption are true? (Choose two.)