350-701 Exam Questions

A network engineer has entered the snmp-server user andy myv3 auth sha cisco priv aes 256 cisc0380739941 command and needs to send SNMP information to a host at 10.255.254.1. Which...

Which type of attack is social engineering?

Which compliance status is shown when a configured posture policy requirement is not met?

What must be used to share data between multiple security products?

An engineer wants to automatically assign endpoints that have a specific OUI into a new endpoint group. Which probe must be enabled for this type of profiling to work?

Which PKI enrollment method allows the user to separate authentication and enrollment actions and also provides an option to specify HTTP/TFTP commands to perform file retrieval fr...

A network engineer is configuring DMVPN and entered the crypto is akmp key cisc0380739941 address 0.0.0.0 command on host A The tunnel is not being established to host B. What acti...

A network administrator configures Dynamic ARP Inspection on a switch. After Dynamic ARP Inspection is applied, all users on that switch are unable to communicate with any destinat...

Refer to the exhibit. What does the API do when connected to a Cisco security appliance?

Refer to the exhibit. A network administrator configured a site-to-site VPN tunnel between two Cisco IOS routers, and hosts are unable to communicate between two sites of VPN. The...

Refer to the exhibit. An engineer configured wired 802.1x on the network and is unable to get a laptop to authenticate. Which port configuration is missing?

Refer to the exhibit. A network administrator configures command authorization for the admm5 user. What is the admin5 user able to do on HQ_Router after this configuration?

An organization is receiving SPAM emails from a known malicious domain. What must be configured in order to prevent the session during the initial TCP communication?

What is a key difference between Cisco Firepower and Cisco ASA?

While using Cisco Secure Firewall's Security Intelligence policies, which two criteria is blocking based upon? (Choose two.)

An attacker needs to perform reconnaissance on a target system to help gain access to it. The system has weak passwords, no encryption on the VPN links, and software bugs on the sy...

A network administrator is using the Cisco Secure Email Gateway with AMP to upload files to the cloud for analysis. The network is congested and is affecting communication. How wil...

Refer to the exhibit. Traffic is not passing through IPsec site-to-site VPN on the Firepower Threat Defense appliance. What is causing this issue?

What are two DDoS attack categories? (Choose two.)

What is a feature of Cisco NetFlow Secure Event Logging for Cisco ASAs?

Which product allows Cisco FMC to push security intelligence observable to its sensors from other products?

An organization has two machines hosting web applications. Machine 1 is vulnerable to SQL injection while machine 2 is vulnerable to buffer overflows. What action would allow the a...

An organization is trying to improve their Defense in Depth by blocking malicious destinations prior to a connection being established. The solution must be able to block certain a...

An engineer notices traffic interruption on the network. Upon further investigation, it is learned that broadcast packets have been flooding the network. What must be configured, b...

In which situation should an Endpoint Detection and Response solution be chosen versus an Endpoint Protection Platform?

What is provided by the Secure Hash Algorithm in a VPN?

Which type of API is being used when a controller within a software-defined network architecture dynamically makes configuration changes on switches within the network?

An engineer needs behavioral analysis to detect malicious activity on the hosts, and is configuring the organization's public cloud to send telemetry using the cloud provider's mec...

What is managed by Cisco Security Manager?

Why is it important to have logical security controls on endpoints even though the users are trained to spot security threats and the network devices already help prevent them?

What is the benefit of installing Cisco AMP for Endpoints on a network?

Which Talos reputation center allows for tracking the reputation of IP addresses for email and web traffic?

An engineer is configuring 802.1X authentication on Cisco switches in the network and is using CoA as a mechanism. Which port on the firewall must be opened to allow the CoA traffi...

What is the purpose of the certificate signing request when adding a new certificate for a server?

What is the purpose of the My Devices Portal in a Cisco ISE environment?

An organization received a large amount of SPAM messages over a short time period. In order to take action on the messages, it must be determined how harmful the messages are and t...

What is an attribute of the DevSecOps process?

A user has a device in the network that is receiving too many connection requests from multiple machines. Which type of attack is the device undergoing?

Refer to the exhibit. An organization is using DHCP Snooping within their network. A user on VLAN 41 on a new switch is complaining that an IP address is not being obtained. Which...

A company is experiencing exfiltration of credit card numbers that are not being stored on- premise. The company needs to be able to protect sensitive data throughout the full envi...

Which algorithm provides asymmetric encryption?

For Cisco IOS PKI, which two types of Servers are used as a distribution point for CRLs?

When Cisco and other industry organizations publish and inform users of known security findings and vulnerabilities, which name is used?

What is the Cisco API-based broker that helps reduce compromises, application risks, and data breaches in an environment that is not on-premise?

Which Cisco platform ensures that machines that connect to organizational networks have the recommended antivirus definitions and patches to help prevent an organizational malware...

A Cisco Firepower administrator needs to configure a rule to allow a new application that has never been seen on the network. Which two actions should be selected to allow the traf...

Which two fields are defined in the NetFlow flow? (Choose two.)

An organization is implementing URL blocking using Cisco Umbrella. The users are able to go to some sites but other sites are not accessible due to an error. Why is the error occur...

An engineer is trying to securely connect to a router and wants to prevent insecure algorithms from being used. However, the connection is failing. Which action should be taken to...

How does DNS Tunneling exfiltrate data?