350-701 Exam Questions
916 real 350-701 exam questions with expert-verified answers and explanations. Page 3 of 19.
- Question #101
Which technology is used to improve web traffic performance by proxy caching?
WSAProxy cachingWeb optimization - Question #102
Which two methods are available in Cisco Secure Web Appliance to process client requests when configured in Transparent mode? (Choose two.)
Cisco Secure Web ApplianceTransparent modeWCCP v2Layer 4 switching - Question #103Content Security
Which action controls the amount of URI text that is stored in Cisco WSA logs files?
Cisco WSAWSA loggingURI loggingadvancedproxyconfig - Question #104Cloud Security
Which technology reduces data loss by identifying sensitive information stored in public computing environments?
Cisco CloudlockDLPCASBcloud data protection - Question #105Network Security
Refer to the exhibit. What does the number 15 represent in this configuration?
Cisco SNMPAccess Control ListsIOS configuration - Question #106
Which network monitoring solution uses streams and pushes operational data to provide a near real-time view of activity?
Model-driven telemetryNetwork monitoringReal-time data streaming - Question #107
Which feature is supported when deploying Cisco ASAv within AWS public cloud?
Cisco ASAvAWS deploymentCloud networkingLayer 3 networking - Question #108Content Security
Which proxy mode must be used on Cisco WSA to redirect TCP traffic with WCCP?
Cisco WSAWCCPtransparent proxyweb proxy modes - Question #109Endpoint Protection and Detection
An MDM provides which two advantages to an organization with regards to device management? (Choose two.)
MDMDevice managementAsset inventoryApplication management - Question #110
Which Talos reputation center allows you to track the reputation of IP addresses for email and web traffic?
Cisco TalosIP ReputationThreat Intelligence - Question #111
Under which two circumstances is a CoA issued? (Choose two.)
CoACisco ISENAC policy enforcement - Question #112Network Security
Which statement about the configuration of Cisco ASA NetFlow v9 Secure Event Logging is true?
Cisco ASANetFlow v9NSELFlow Export Configuration - Question #113Endpoint Protection and Detection
Which benefit does endpoint security provide the overall security posture of an organization?
endpoint securitydefense in depththreat detectionperimeter gaps - Question #115
What is a language format designed to exchange threat intelligence that can be transported over the TAXII protocol?
STIXTAXII protocolThreat Intelligence Sharing - Question #116Endpoint Protection and Detection
When using Cisco AMP for Networks, which feature copies a file to the Cisco AMP cloud for analysis?
Cisco AMPdynamic analysisfile submissioncloud sandbox - Question #117Endpoint Protection and Detection
Which Cisco Advanced Malware protection for Endpoints deployment architecture is designed to keep data within a network perimeter?
Cisco AMPprivate clouddeployment architecturedata sovereignty - Question #118
Which IPS engine detects ARP spoofing?
IPS engineARP spoofingAtomic ARP Engine - Question #119Network Security
Which statement describes a traffic profile on a Cisco Next Generation Intrusion Prevention System?
Cisco NGIPSTraffic ProfileIntrusion PreventionTraffic Anomaly Detection - Question #120Security Operations and Orchestration
Which two are valid suppression types on a Cisco Next Generation Intrusion Prevention System?
Cisco NGIPSsuppression typesIPS tuningfalse positive management - Question #121
Which license is required for Cisco Security Intelligence to work on the Cisco Next Generation Intrusion Prevention System?
Cisco Security IntelligenceCisco NGIPSCisco licensing - Question #122Security Operations and Orchestration
Which policy is used to capture host information on the Cisco Next Generation Intrusion Prevention System?
Cisco NGIPSnetwork discovery policyhost profilingFMC - Question #123Security Operations and Orchestration
On Cisco Firepower Management Center, which policy is used to collect health modules alerts from managed devices?
Cisco FMChealth policymanaged devicesFirepower management - Question #124Security Operations and Orchestration
Which CLI command is used to register a Cisco FirePOWER sensor to Firepower Management Center?
FirePOWERFMC registrationsensor managementCLI - Question #125Endpoint Security
Which Cisco AMP file disposition valid?
Cisco AMPFile Disposition - Question #126Endpoint Security
Which capability is exclusive to a Cisco AMP public cloud instance as compared to a private cloud instance?
Cisco AMPAMP deployment modelsDetection engines - Question #127Endpoint Protection and Detection
Which function is the primary function of Cisco AMP threat Grid?
AMP Threat Gridmalware analysissandboxingthreat intelligence - Question #128Network Security
Which two characteristics of messenger protocols make data exfiltration difficult to detect and prevent? (Choose two.)
Data exfiltrationMessenger protocol securityEncrypted traffic visibilityNetwork security monitoring - Question #129
How many interfaces per bridge group does an ASA bridge group deployment support?
Cisco ASAASA bridge groupinterface limits - Question #130
Which benefit is provided by ensuring that an endpoint is compliant with a posture policy configured in Cisco ISE?
Cisco ISE Posture PolicyEndpoint ComplianceDevice Health Checks - Question #131Security Operations and Orchestration
What is a feature of the open platform capabilities of Cisco DNA Center?
DNA Centerintent-based APIsnetwork automationopen platform - Question #132Security Operations and Orchestration
Which telemetry data captures variations seen within the flow, such as the packets TTL, IP/TCP flags, and payload length?
NetFlowinterpacket variationnetwork telemetryflow analysis - Question #133Content Security
In which two ways does a system administrator send web traffic transparently to the Cisco WSA? (Choose two.)
WSAtransparent proxyWCCPpolicy-based routing - Question #134
Which form of attack is launched using botnets?
BotnetsDDoS attackCybersecurity threats - Question #135Network Security
How is DNS tunneling used to exfiltrate data out of a corporate network?
DNS tunnelingData exfiltrationNetwork attacks - Question #136Content Security
Which Cisco security solution protects remote users against phishing attacks when they are not connected to the VPN?
Cisco UmbrellaDNS securityphishing protectionremote users - Question #137Visibility and Enforcement
Which two tasks allow NetFlow on a Cisco ASA 5500 Series firewall? (Choose two.)
Cisco ASA NetFlowNetFlow configuration - Question #138Network Security
What is a difference between FlexVPN and DMVPN?
FlexVPNDMVPNIKEv1IKEv2 - Question #139
A mall provides security services to customers with a shared appliance. The mall wants separation of management on the shared appliance. Which ASA deployment mode meets these needs...
Cisco ASAASA deployment modesASA multiple context modeFirewall multi-tenancy - Question #140
What is the function of the Context Directory Agent?
Cisco Context Directory AgentIdentity MappingIP-User MappingSecurity Services - Question #141Secure Connectivity
What is a commonality between DMVPN and FlexVPN technologies?
DMVPNFlexVPNNHRP - Question #142Endpoint Protection and Detection
Which two risks is a company vulnerable to if it does not have a well-established patching solution for endpoints? (Choose two.)
patch managementvulnerability managementmalwareexploits - Question #143Security Concepts
Which threat involves software being used to gain unauthorized access to a computer system?
MalwareVirusesThreat types - Question #144Network Security
What is a characteristic of Firepower NGIPS inline deployment mode?
Firepower NGIPSInline DeploymentNetwork Security DevicesIPS Modes - Question #145
What are two rootkit types? (Choose two)
rootkitsmalware types - Question #146Visibility and Enforcement
An engineer wants to generate NetFlow records on traffic traversing the Cisco ASA. Which Cisco ASA command must be used?
Cisco ASANetFlowConfiguration - Question #147Secure Network Access, Visibility, and Enforcement
Which Cisco command enables authentication, authorization, and accounting globally so that CoA is supported on the device?
AAACoAaaa new-modelRADIUS - Question #148
Refer to the exhibit. What is the result of this Python script of the Cisco DNA Center API?
Python scriptingCisco DNA Center APINetwork automationDevice provisioning - Question #149Security Concepts
What are two reasons for implementing a multifactor authentication solution such as Duo Security provide to an organization? (Choose two.)
MFADuo Securitytwo-factor authenticationaccess control - Question #150Secure Network Access, Visibility, and Enforcement
Which protocol provides the strongest throughput performance when using Cisco AnyConnect VPN?
AnyConnect VPNDTLSTLSVPN performance - Question #151Security Operations and Orchestration
Which Cisco product is open, scalable, and built on IETF standards to allow multiple security products from Cisco and other vendors to share data and interoperate with each other?
pxGridPlatform Exchange Gridsecurity integrationthreat sharing