350-701 Exam Questions

Which suspicious pattern enables the Cisco Secure Workload platform to learn the normal behavior of users?

Due to a traffic storm on the network, two interfaces were error-disabled, and both interfaces sent SNMP traps. Which two actions must be taken to ensure that interfaces are put ba...

What is the difference between Cross-site Scripting and SQL Injection attacks?

A network administrator is configuring a switch to use Cisco ISE for 802.1X. An endpoint is failing authentication and is unable to access the network. Where should the administrat...

What is a prerequisite when integrating a Cisco ISE server and an AD domain?

An organization recently installed a Cisco Secure Web Appliance and would like to take advantage of the AVC engine to allow the organization to create a policy to control applicati...

Which method is used to deploy certificates and configure the supplicant on mobile devices to gain access to network resources?

Refer to the exhibit. What will happen when this Python script is run?

An organization is trying to implement micro-segmentation on the network and wants to be able to gain visibility on the applications within the network. The solution must be able t...

Which factor must be considered when choosing the on-premise solution over the cloud-based one?

Which term describes when the Cisco Firepower downloads threat intelligence updates from Cisco Talos?

An organization has a Cisco Stealthwatch Cloud deployment in their environment. Cloud logging is working as expected, but logs are not being received from the on-premise network, w...

What does Cisco AMP for Endpoints use to help an organization detect different families of malware?

What are two characteristics of Cisco Catalyst Center APIs? (Choose two.)

What is a benefit of conducting device compliance checks?

In which two ways does Easy Connect help control network access when used with Cisco TrustSec? (Choose two)

A switch with Dynamic ARP Inspection enabled has received a spoofed ARP response on a trusted interface. How does the switch behave in this situation?

An administrator is configuring a DHCP server to better secure their environment. They need to be able to rate-limit the traffic and ensure that legitimate requests are not dropped...

Refer to the exhibit. What will happen when the Python script is executed?

Refer to the exhibit. When configuring a remote access VPN solution terminating on the Cisco ASA, an administrator would like to utilize an external token authentication mechanism...

An engineer has been tasked with implementing a solution that can be leveraged for securing the cloud users, data, and applications. There is a requirement to use the Cisco cloud n...

An engineer needs a cloud solution that will monitor traffic, create incidents based on events, and integrate with other cloud solutions via an API. Which solution should be used t...

Why is it important to implement MFA inside of an organization?

A network administrator is configuring SNMPv3 on a new router. The users have already been created; however, an additional configuration is needed to facilitate access to the SNMP...

An organization is using Cisco Firepower and Cisco Meraki MX for network security and needs to centrally manage cloud policies across these platforms. Which software should be used...

An administrator is establishing a new site-to-site VPN connection on a Cisco IOS router. The organization needs to ensure that the ISAKMP key on the hub is used only for terminati...

Drag and Drop Question Drag and drop the NetFlow export formats from the left onto the descriptions on the right. Answer:

Drag and Drop Question Drag and drop the solutions from the left onto the solution's benefits on the right. Answer:

Refer to the exhibit. An administrator is adding a new Cisco FTD device to their network and wants to manage it with Cisco FMG. The Cisco FTD is not behind a NAT device. Which comm...

An organization has a Cisco Secure Email Gateway set up with policies and would like to customize the action assigned for violations. The organization wants a copy of the message t...

Where are individual sites specified to be black listed in Cisco Umbrella?

Drag and Drop Question Drag and drop the common security threats from the left onto the definitions on the right. Answer:

What is the purpose of a Netflow version 9 template record?

What is the purpose of CA in a PKI?

When choosing an algorithm to us what should be considered about Diffie Hellman and RSA for key establishment?

Which category includes Dos Attacks?

Which service allows a user export application usage and performance statistics with Cisco Application Visibility and control?

Which kind of API that is used with Cisco DNA Center provisions SSIDs, Qos policies, and update software versions on switches?

Which parameter is required when configuring a Netflow exporter on a Cisco Router?

What are two advantages of using Cisco AnyConnect over DMVPN? (Choose two.)

A network engineer needs to select a VPN type that provides the most stringent security, multiple security associations for the connections, and efficient VPN establishment with th...

Which algorithm is an NGE hash function?

What is a capability of Cisco ASA Netflow?

Which type of encryption uses a public key and private Key?

What are two Trojan malware attacks? (Choose two)

Which two capabilities of Integration APIs are utilized with Cisco Catalyst Center? (Choose two.)

An engineer is configuring IPsec VPN and needs an authentication protocol that is reliable and supports ACK and sequence. Which protocol accomplishes this goal?

What are two features of NetFlow flow monitoring? (Choose two.)

Which cryptographic process provides origin confidentiality, integrity, and origin authentication for packets?

What is a benefit of performing device compliance?