350-701 Exam Questions

An administrator enables Cisco Threat Intelligence Director on a Cisco FMC. Which process uses STIX and allows uploads and downloads of block lists?

Which open standard creates a framework for sharing threat intelligence in a machine-digestible format?

What are two functionalities of SDN Northbound APIs? (Choose two.)

What is an advantage of network telemetry over SNMP polls?

What are two functions of TAXII in threat intelligence sharing? (Choose two.)

A network engineer must migrate a Cisco WSA virtual appliance from one physical host to another physical host by using VMware vMotion. What is a requirement for both physical hosts...

What is a difference between Cisco AMP for Endpoints and Cisco Umbrella?

What is the result of the ACME-Router(config)#login block-for 100 attempts 4 within 60 command on a Cisco IOS router?

An engineer is implementing Cisco CES in an existing Microsoft Office 365 environment and must route inbound email to Cisco CES addresses. Which DNS record must be modified to acco...

What are two functionalities of northbound and southbound APIs within Cisco SDN architecture? (Choose two.)

Refer to the exhibit. Which configuration item makes it possible to have the AAA session on the network?

Refer to the exhibit. What is the function of the Python script code snippet for the Cisco ASA REST API?

An engineer must modify a policy to block specific addresses using Cisco Umbrella. The policy is created already and is actively used by devices, using many of the default policy e...

An engineer is trying to decide between using L2TP or GRE over IPsec for their site-to-site VPN implementation. What must be understood before choosing a solution?

What is a benefit of using a multifactor authentication strategy?

A Cisco ISE engineer configures Central Web Authentication (CWA) for wireless guest access and must have the guest endpoints redirect to the guest portal for authentication and aut...

Which two solutions help combat social engineering and phishing at the endpoint level? (Choose two.)

Which role is a default guest type in Cisco ISE?

Which two methods must be used to add switches into the fabric so that administrators can control how switches are added into DCNM for private cloud management? (Choose two.)

Refer to the exhibit. All servers are in the same VLAN/Subnet. DNS Server-1 and DNS Server-2 must communicate with each other, and communicate with default gateway multilayer switc...

Refer to the exhibit. When creating an access rule for URL filtering, a network engineer adds certain categories and individual URLs to block. What is the result of the configurati...

Why is it important to have a patching strategy for endpoints?

An engineer is configuring Cisco Umbrella and has an identity that references two different policies. Which action ensures that the policy that the identity must use takes preceden...

Which security product enables administrators to deploy Kubernetes clusters in air-gapped sites without needing Internet access?

What is the intent of a basic SYN flood attack?

An engineer configures new features within the Cisco Umbrella dashboard and wants to identify and proxy traffic that is categorized as risky domains and may contain safe and malici...

Which endpoint solution protects a user from a phishing attack?

What must be enabled to secure SaaS-based applications?

Refer to the exhibit. The DHCP snooping database resides on router R1, and dynamic ARP inspection is configured only on switch SW2. Which ports must be configured as untrusted so t...

An engineer is configuring device-hardening on a router in order to prevent credentials from being seen if the router configuration was compromised. Which command should be used?

Which security solution protects users leveraging DNS-layer security?

Which CoA response code is sent if an authorization state is changed successfully on a Cisco IOS device?

Which security solution uses NetFlow to provide visibility across the network, data center, branch offices, and cloud?

How does a WCCP-configured router identify if the Cisco WSA is functional?

Which solution supports high availability in routed or transparent mode as well as in northbound and southbound deployments?

Which Cisco ASA Platform mode disables the threat detection features except for Advanced Threat Statistics?

Which benefit does DMVPN provide over GETVPN?

An organization has DHCP servers set up to allocate IP addresses to clients on the LAN. What must be done to ensure the LAN switches prevent malicious DHCP traffic while also distr...

Which two parameters are used to prevent a data breach in the cloud? (Choose two.)

Which technology enables integration between Cisco ISE and other platforms to gather and share network and vulnerability data and SIEM and location information?

Which Cisco DNA Center Intent API action is used to retrieve the number of devices known to a DNA Center?

An organization must add new firewalls to its infrastructure and wants to use Cisco ASA or Cisco FTD. The chosen firewalls must provide methods of blocking traffic that include off...

An engineer is configuring web filtering for a network using Cisco Umbrella Secure Internet Gateway. The requirement is that all traffic needs to be filtered. Using the SSL decrypt...

An engineer needs to configure an access control policy rule to always send traffic for inspection without using the default action. Which action should be configured for this rule...

When NetFlow is applied to an interface, which component creates the flow monitor cache that is used to collect traffic based on the key and nonkey fields in the configured record?

Which encryption algorithm provides highly secure VPN communications?

An administrator needs to configure the Cisco ASA via ASDM such that the network management system can actively monitor the host using SNMPv3. Which two tasks must be performed for...

Which Cisco ASA deployment model is used to filter traffic between hosts in the same IP subnet using higher-level protocols without readdressing the network?

Which function is performed by certificate authorities but is a limitation of registration authorities?

Which two functions does the Cisco Advanced Phishing Protection solution perform in trying to protect from phishing attacks? (Choose two.)