350-701 Exam Questions

What is the role of Cisco Umbrella Roaming when it is installed on an endpoint?

A company discovered an attack propagating through their network via a file. A custom file policy was created in order to track this in the future and ensure no other endpoints exe...

A network engineer must monitor user and device behavior within the on-premises network. This data must be sent to the Cisco Stealthwatch Cloud analytics platform for analysis. Wha...

What is a difference between a DoS attack and DDos attack?

An engineer has been tasked with configuring a Cisco FTD to analyze protocol fields and detect anomalies in the traffic from industrial systems. What must be done to meet these req...

What is the benefit of integrating cisco ISE with a MDM solution?

Refer to the exhibit. A network engineer is testing NTP authentication and realizes that any device synchronizes time with this router and that NTP authentication is not enforced....

Which posture assessment requirement provides options to the client for remediation and requires the remediation within a certain timeframe?

An administrator configures new authorization policies within Cisco ISE and has difficulty profiling the devices. Attributes for the new Cisco IP phones that are profiled based on...

What is a functional difference between a Cisco ASA and Cisco IOS router with Zone-Based Policy Firewall?

A Cisco FTD engineer is creating a new IKEv2 policy called s2s00123456789 for their organization to allow for additional protocols to terminate network devices with. They currently...

Which cloud model is a collaborative effort where infrastructure is shared and jointly accessed by several organizations from a specific group?

A customer has various external HTTP resources available including Intranet Extranet and Internet, with a proxy configuration running in explicit mode. Which method allows the clie...

An organization uses Cisco FMC to centrally manage multiple Cisco FTD devices. The default management port conflicts with other communications on the network and must be changed. W...

Refer to the exhibit. What does the Python script accomplish?

Which component of cisco umbrella architecture increases reliability of the service?

An organization wants to use Cisco FTD or Cisco ASA devices Specific URLs must be blocked from being accessed via the firewall, which requires that the administrator input the bad...

Which type of DNS abuse exchanges data between two computers even when there is no direct connection?

Which DevSecOps implementation process gives a weekly or daily update instead of monthly or quarterly in the applications?

An organization deploys multiple Cisco FTD appliances and wants to manage them using one centralized solution. The organization does not have a local VM but does have existing Cisc...

An administrator configures a Cisco WSA to receive redirected traffic over ports 80 and 443. The organization requires that a network device with specific WSA integration capabilit...

An organization configures Cisco Umbrella to be used for its DNS services. The organization must be able to block traffic based on the subnet that the endpoint is on, but sees only...

An organization wants to secure data in a cloud environment. Its security model requires that all users be authenticated and authorized. Security configuration and posture must be...

An engineer is configuring cloud logging using a company-managed Amazon S3 bucket for Cisco Umbrella logs. What benefit does this configuration provide for accessing log data?

How does Cisco Workload Optimization Manager help mitigate application performance issues?

An engineer adds a custom detection policy to a Cisco AMP deployment and encounters issues with the configuration. The simple detection mechanism is configured, but the dashboard i...

What is a benefit of using telemetry over SNMP to configure new routers for monitoring purposes?

An organization wants to provide visibility and to identify active threats in its network using a VM. The organization wants to extract metadata from network packet flow while ensu...

What is a difference between GETVPN and iPsec?

An administrator configures a new destination list in Cisco Umbrella so that the organization can block specific domains for its devices. What should be done to ensure that all sub...

An organization wants to secure users, data, and applications in the cloud. The solution must be API-based on operate as a cloud-native CASB. Which solution must be used for this i...

Which attribute has the ability to change during the RADIUS CoA?

What is a difference between an XSS attack and an SQL injection attack?

Which VMware platform does Cisco ACI integrate with to provide enhanced visibility, provide policy integration and deployment, and implement security policies with access lists?

Refer to the exhibit. How does Cisco Umbrella manage traffic that is directed toward risky domains?

Drag and Drop Question Drag and Drop the cloud security assessment components from the left onto the definitions on the right. Answer:

Refer to the exhibit. A Cisco ISE administrator adds a new switch to an 802. 1X deployment and has difficulty with some endpoints gaining access. Most PCs and IP phones can connect...

An administrator is adding a new switch onto the network and has configured AAA for network access control. When testing the configuration, the RADIUS authenticates to Cisco ISE bu...

An engineer is adding a Cisco router to an existing environment. NTP authentication is configured on all devices in the environment with the command ntp authentication-key 1 md5 Cl...

What does endpoint isolation in Cisco AMP for Endpoints security protect from?

Which system facilitates deploying microsegmentation and multi-tenancy services with a policy- based container?

Which feature is leveraged by advanced antimalware capabilities to be an effective endpomt protection platform?

An organization wants to implement a cloud-delivered and SaaS-based solution to provide visibility and threat detection across the AWS network. The solution must be deployed withou...

What is the difference between a vulnerability and an exploit?

Cisco SensorBase gathers threat information from a variety of Cisco products and services and performs analytics to find pattern on threats. Which term describes this process?

An engineer is configuring their router to send NetfFow data to Stealthwatch which has an IP address of 1.1.1.1 using the flow record Stealthwatch406143794 command. Which additiona...

Which Cisco platform processes behavior baselines, monitors for deviations, and reviews for malicious processes in data center traffic and servers while performing software vulnera...

How is data sent out to the attacker during a DNS tunneling attack?

An engineer is adding a Cisco DUO solution to the current TACACS+ deployment using Cisco ISE. The engineer wants to authenticate users using their account when they log into networ...

A Cisco AMP for Endpoints administrator configures a custom detection policy to add specific MD5 signatures. The configuration is created in the simple detection policy section, bu...