350-701 Exam Questions
916 real 350-701 exam questions with expert-verified answers and explanations. Page 3 of 19.
- Question #101
Which technology is used to improve web traffic performance by proxy caching?
WSAProxy cachingWeb optimization - Question #102
Which two methods are available in Cisco Secure Web Appliance to process client requests when configured in Transparent mode? (Choose two.)
Cisco Secure Web ApplianceTransparent modeWCCP v2Layer 4 switching - Question #103Content Security
Which action controls the amount of URI text that is stored in Cisco WSA logs files?
Cisco WSAWSA loggingURI loggingadvancedproxyconfig - Question #104
Which technology reduces data loss by identifying sensitive information stored in public computing environments?
Cisco CloudlockCloud DLPData Loss PreventionSensitive Data Identification - Question #105Network Security
Refer to the exhibit. What does the number 15 represent in this configuration?
Cisco SNMPAccess Control ListsIOS configuration - Question #106
Which network monitoring solution uses streams and pushes operational data to provide a near real-time view of activity?
Model-driven telemetryNetwork monitoringReal-time data streaming - Question #107
Which feature is supported when deploying Cisco ASAv within AWS public cloud?
Cisco ASAvAWS deploymentCloud networkingLayer 3 networking - Question #108
Which proxy mode must be used on Cisco WSA to redirect TCP traffic with WCCP?
Cisco WSAWCCPTransparent proxy - Question #109Endpoint Protection and Detection
An MDM provides which two advantages to an organization with regards to device management? (Choose two.)
MDMDevice managementAsset inventoryApplication management - Question #110
Which Talos reputation center allows you to track the reputation of IP addresses for email and web traffic?
Cisco TalosIP ReputationThreat Intelligence - Question #111
Under which two circumstances is a CoA issued? (Choose two.)
CoACisco ISENAC policy enforcement - Question #112Network Security
Which statement about the configuration of Cisco ASA NetFlow v9 Secure Event Logging is true?
Cisco ASANetFlow v9NSELFlow Export Configuration - Question #113
Which benefit does endpoint security provide the overall security posture of an organization?
Endpoint securitySecurity posture - Question #115
What is a language format designed to exchange threat intelligence that can be transported over the TAXII protocol?
STIXTAXII protocolThreat Intelligence Sharing - Question #116
When using Cisco AMP for Networks, which feature copies a file to the Cisco AMP cloud for analysis?
Cisco AMPDynamic analysisMalware analysis - Question #117
Which Cisco Advanced Malware protection for Endpoints deployment architecture is designed to keep data within a network perimeter?
Cisco AMP for EndpointsDeployment architecturesData residency - Question #118
Which IPS engine detects ARP spoofing?
IPS engineARP spoofingAtomic ARP Engine - Question #119Network Security
Which statement describes a traffic profile on a Cisco Next Generation Intrusion Prevention System?
Cisco NGIPSTraffic ProfileIntrusion PreventionTraffic Anomaly Detection - Question #120
Which two are valid suppression types on a Cisco Next Generation Intrusion Prevention System?
Cisco NGIPSIPS suppression types - Question #121
Which license is required for Cisco Security Intelligence to work on the Cisco Next Generation Intrusion Prevention System?
Cisco Security IntelligenceCisco NGIPSCisco licensing - Question #122
Which policy is used to capture host information on the Cisco Next Generation Intrusion Prevention System?
Cisco NGIPSNetwork Discovery PolicyHost Information Capture - Question #123
On Cisco Firepower Management Center, which policy is used to collect health modules alerts from managed devices?
Cisco FMCHealth policyDevice monitoring - Question #124
Which CLI command is used to register a Cisco FirePOWER sensor to Firepower Management Center?
Cisco FirePOWERFirepower Management CenterSensor registrationCLI commands - Question #125Endpoint Security
Which Cisco AMP file disposition valid?
Cisco AMPFile Disposition - Question #126Endpoint Security
Which capability is exclusive to a Cisco AMP public cloud instance as compared to a private cloud instance?
Cisco AMPAMP deployment modelsDetection engines - Question #127
Which function is the primary function of Cisco AMP threat Grid?
Cisco AMP Threat GridMalware AnalysisThreat Intelligence - Question #128Network Security
Which two characteristics of messenger protocols make data exfiltration difficult to detect and prevent? (Choose two.)
Data exfiltrationMessenger protocol securityEncrypted traffic visibilityNetwork security monitoring - Question #129
How many interfaces per bridge group does an ASA bridge group deployment support?
Cisco ASAASA bridge groupinterface limits - Question #130
Which benefit is provided by ensuring that an endpoint is compliant with a posture policy configured in Cisco ISE?
Cisco ISE Posture PolicyEndpoint ComplianceDevice Health Checks - Question #131
What is a feature of the open platform capabilities of Cisco DNA Center?
Cisco DNA CenterIntent-based APIs - Question #132
Which telemetry data captures variations seen within the flow, such as the packets TTL, IP/TCP flags, and payload length?
network telemetryflow datainterpacket variation - Question #133
In which two ways does a system administrator send web traffic transparently to the Cisco WSA? (Choose two.)
Cisco WSATransparent ProxyPBRWCCP - Question #134
Which form of attack is launched using botnets?
BotnetsDDoS attackCybersecurity threats - Question #135Network Security
How is DNS tunneling used to exfiltrate data out of a corporate network?
DNS tunnelingData exfiltrationNetwork attacks - Question #136
Which Cisco security solution protects remote users against phishing attacks when they are not connected to the VPN?
Cisco Umbrellaphishing protectionremote access securityDNS security - Question #137Visibility and Enforcement
Which two tasks allow NetFlow on a Cisco ASA 5500 Series firewall? (Choose two.)
Cisco ASA NetFlowNetFlow configuration - Question #138Network Security
What is a difference between FlexVPN and DMVPN?
FlexVPNDMVPNIKEv1IKEv2 - Question #139
A mall provides security services to customers with a shared appliance. The mall wants separation of management on the shared appliance. Which ASA deployment mode meets these needs...
Cisco ASAASA deployment modesASA multiple context modeFirewall multi-tenancy - Question #140
What is the function of the Context Directory Agent?
Cisco Context Directory AgentIdentity MappingIP-User MappingSecurity Services - Question #141Secure Connectivity
What is a commonality between DMVPN and FlexVPN technologies?
DMVPNFlexVPNNHRP - Question #142
Which two risks is a company vulnerable to if it does not have a well-established patching solution for endpoints? (Choose two.)
Patch managementEndpoint securityVulnerability management - Question #143Security Concepts
Which threat involves software being used to gain unauthorized access to a computer system?
MalwareVirusesThreat types - Question #144Network Security
What is a characteristic of Firepower NGIPS inline deployment mode?
Firepower NGIPSInline DeploymentNetwork Security DevicesIPS Modes - Question #145
What are two rootkit types? (Choose two)
rootkitsmalware types - Question #146Visibility and Enforcement
An engineer wants to generate NetFlow records on traffic traversing the Cisco ASA. Which Cisco ASA command must be used?
Cisco ASANetFlowConfiguration - Question #147
Which Cisco command enables authentication, authorization, and accounting globally so that CoA is supported on the device?
Cisco AAAAAA new-modelChange of Authorization - Question #148
Refer to the exhibit. What is the result of this Python script of the Cisco DNA Center API?
Python scriptingCisco DNA Center APINetwork automationDevice provisioning - Question #149
What are two reasons for implementing a multifactor authentication solution such as Duo Security provide to an organization? (Choose two.)
Multifactor Authentication (MFA)2FA methodsSecure access - Question #150
Which protocol provides the strongest throughput performance when using Cisco AnyConnect VPN?
Cisco AnyConnectVPN protocolsDTLSThroughput performance - Question #151
Which Cisco product is open, scalable, and built on IETF standards to allow multiple security products from Cisco and other vendors to share data and interoperate with each other?
Cisco pxGridSecurity integration