What is the function of the Python script code snippet for the Cisco ASA REST API?

adds a global rule into policies

changes the hostname of the Cisco ASA

deletes a global rule from policies

obtains the saved configuration of the Cisco ASA firewall

An engineer must modify a policy to block specific addresses using Cisco Umbrell a. The policy is created already and is actively u: of the default policy elements. What else must be done to accomplish this task?

Create a destination list for addresses to be allowed or blocked.

Add the specified addresses to the identities list and create a block action.

Create a destination list for addresses to be allowed or blocked.

Use content categories to block or allow specific addresses.

Modify the application settings to allow only applications to connect to required addresses.

An engineer is trying to decide between using L2TP or GRE over IPsec for their site-to-site VPN implementation. What must be un solution?

GRE over IPsec cannot be used as a standalone protocol, and L2TP can.

L2TP is an IP packet encapsulation protocol, and GRE over IPsec is a tunneling protocol.

L2TP uses TCP port 47 and GRE over IPsec uses UDP port 1701.

GRE over IPsec adds its own header, and L2TP does not.

GRE over IPsec cannot be used as a standalone protocol, and L2TP can.

What is a benefit of using a multifactor authentication strategy?

lt protects data by enabling the use of a second validation of identity.

It provides visibility into devices to establish device trust.

It provides secure remote access for applications.

It provides an easy, single sign-on experience against multiple applications

lt protects data by enabling the use of a second validation of identity.

A Cisco ISE engineer configures Central Web Authentication (CWA) for wireless guest access and must have the guest endpoints redirect to the guest portal for authentication and authorization.While testing the policy, the engineer notices that the device is not redirected and instead gets full guest access. What must be done for the redirect to work?

Add the DACL name for the Airespace ACL configured on the WLC in the Common Tasks section of the authorization profile for the authorization policy line that the unauthenticated devices hit.

Tag the guest portal in the CWA part of the Common Tasks section of the authorization profile for the authorization policy line that the unauthenticated devices hit.

Use the track movement option within the authorization profile for the authorization policy line that the unauthenticated devices hit.

Create an advanced attribute setting of Cisco:cisco-gateway-id=guest within the authorization profile for the authorization policy line that the unauthenticated devices hit.

Add the DACL name for the Airespace ACL configured on the WLC in the Common Tasks section of the authorization profile for the authorization policy line that the unauthenticated devices hit.

Refer to the exhibit. All servers are in the same VLAN/Subnet. DNS Server-1 and DNS Server-2 must communicate with each other, and communicate with default gateway multilayer switch. Which type of private VLAN ports should be configured to prevent communication and the file server?

Configure GigabitEthernet0/1 as promiscuous port, GigabitEthernet0/2 as isolated port, and GigabitEthernet0/3 and GigabitEthernet0/4 as community ports

Configure GigabitEthernet0/1 as community port, GigabitEthernet0/2 as promiscuous port, GigabitEthernet0/3 and GigabrtEthernet0/4 as isolated ports

Configure GigabitEthernet0/1 as community port, GigabitEthernet0/2 as isolated port, and GigabitEthernet0/3 and GigabitEthernet0/4 as promiscuous ports

Configure GigabitEthernet0/1 as promiscuous port, GigabitEthernet0/2 as community port, and GigabitEthernet0/3 and GigabitEthernet0/4 as isolated ports

Configure GigabitEthernet0/1 as promiscuous port, GigabitEthernet0/2 as isolated port, and GigabitEthernet0/3 and GigabitEthernet0/4 as community ports

Refer to the exhibit. When creating an access rule for URL filtering, a network engineer adds certain categories and individual URLs to block. What is the result of the configuration?

Only URLs for botnets with reputation scores of 1-3 will be blocked.

Only URLs for botnets with a reputation score of 3 will be blocked.

Only URLs for botnets with reputation scores of 3-5 will be blocked.

Only URLs for botnets with a reputation score of 3 will be allowed while the rest will be blocked.

Why is it important to have a patching strategy for endpoints?

so that known vulnerabilities are targeted and having a regular patch cycle reduces risks

to take advantage of new features released with patches

so that functionality is increased on a faster scale when it is used

so that known vulnerabilities are targeted and having a regular patch cycle reduces risks

so that patching strategies can assist with disabling nonsecure protocols in applications

An engineer is configuring Cisco Umbrella and has an identity that references two different policies. Which action ensures that the policy that the identity must use takes precedence over the second one?

Make the correct policy first in the policy order

Configure the default policy to redirect the requests to the correct policy

Place the policy with the most-specific configuration last in the policy order

Configure only the policy with the most recently changed timestamp

Make the correct policy first in the policy order

What is the intent of a basic SYN flood attack?

to exceed the threshold limit of the connection queue

to flush the register stack to re-initiate the buffers

to cause the buffer to overflow

An engineer configures new features within the Cisco Umbrella dashboard and wants to identify and proxy traffic that is categorized as risky domains and may contain safe and malicious content. Which action accomplishes these objectives?

Configure intelligent proxy within Cisco Umbrella to intercept and proxy the requests for only those categories.

Configure URL filtering within Cisco Umbrella to track the URLs and proxy the requests for those categories and below.

Configure intelligent proxy within Cisco Umbrella to intercept and proxy the requests for only those categories.

Upload the threat intelligence database to Cisco Umbrella for the most current information on reputations and to have the destination lists block them.

Create a new site within Cisco Umbrella to block requests from those categories so they can be sent to the proxy device.

Which endpoint solution protects a user from a phishing attack?

Cisco AnyConnect with Umbrella Roaming Security module

Cisco AnyConnect with ISE Posture module

Cisco AnyConnect with Network Access Manager module

Cisco AnyConnect with Umbrella Roaming Security module

Using Cisco Cognitive Threat Analytics, which platform automatically blocks risky sites, and test unknown sites for hidden advanced threats before allowing users to click them?

Cisco Enterprise Security Appliance

Cisco Advanced Stealthwatch Appliance

What are two things to consider when using PAC files with the Cisco WSA? (Choose two.)

If the WSA host port is changed, the default port redirects web traffic to the correct port automatically.

The WSA hosts PAC files on port 6001 by default.

If the WSA host port is changed, the default port redirects web traffic to the correct port automatically.

PAC files use if-else statements to determine whether to use a proxy or a direct connection for traffic between the PC and the host.

The WSA hosts PAC files on port 9001 by default.

The WSA hosts PAC files on port 6001 by default.

By default, they direct traffic through a proxy when the PC and the host are on the same subnet.

What are two ways that Cisco Container Platform provides value to customers who utilize cloud service providers? (Choose two.)

Allows developers to create code once and deploy to multiple clouds

Creates complex tasks for managing code

Allows developers to create code once and deploy to multiple clouds

helps maintain source code for cloud deployments

Creates complex tasks for managing code

Which statement describes a serverless application?

The application runs from an ephemeral, event-triggered, and stateless container that is fully managed by a cloud provider.

The application delivery controller in front of the server farm designates on which server the application runs each time.

The application runs from an ephemeral, event-triggered, and stateless container that is fully managed by a cloud provider.

The application is installed on network equipment and not on physical servers.

The application runs from a containerized environment that is managed by Kubernetes or Docker Swarm.

What is a description of microsegmentation?

Environments apply a zero-trust model and specify how applications on different servers or containers can communicate.

Environments deploy a container orchestration platform, such as Kubernetes, to manage the application delivery.

Environments apply a zero-trust model and specify how applications on different servers or containers can communicate.

Environments deploy centrally managed host-based firewall rules on each server or container.

Environments implement private VLAN segmentation to group servers with similar applications.

Which Cisco WSA feature supports access control using URL categories?

transparent user identification

An engineer enabled SSL decryption for Cisco Umbrella intelligent proxy and needs to ensure that traffic is inspected without alerting end-users. Which action accomplishes this goal?

Install the Cisco Umbrella root CA onto the user's device.

Restrict access to only websites with trusted third-party signed certificates.

Modify the user's browser settings to suppress errors from Cisco Umbrella.

Upload the organization root CA to Cisco Umbrella.

Install the Cisco Umbrella root CA onto the user's device.

What is the purpose of joining Cisco WSAs to an appliance group?

All WSAs in the group can view file analysis results.

The group supports improved redundancy

It supports cluster operations to expedite the malware analysis process.

It simplifies the task of patching multiple appliances.

Why should organizations migrate to an MFA strategy for authentication?

Single methods of authentication can be compromised more easily than MFA.

Biometrics authentication leads to the need for MFA due to its ability to be hacked easily.

MFA methods of authentication are never compromised.

MFA does not require any piece of evidence for an authentication mechanism.

Which two actions does the Cisco Identity Services Engine posture module provide that ensures endpoint security? (Choose two.)

Assignments to endpoint groups are made dynamically, based on endpoint attributes.

Patch management remediation is performed.

Assignments to endpoint groups are made dynamically, based on endpoint attributes.

Endpoint supplicant configuration is deployed.

A centralized management solution is deployed.

Patch management remediation is performed.

The latest antivirus updates are applied before access is allowed.

What is an advantage of the Cisco Umbrella roaming client?

the ability to dynamically categorize traffic to previously uncategorized sites

the ability to see all traffic without requiring TLS decryption

visibility into IP-based threats by tunneling suspicious IP connections

the ability to dynamically categorize traffic to previously uncategorized sites

visibility into traffic that is destined to sites within the office environment

Which Cisco platform provides an agentless solution to provide visibility across the network including encrypted traffic analytics to detect malware in encrypted traffic without the need for decryption?

Cisco Advanced Malware Protection

A network engineer is tasked with configuring a Cisco ISE server to implement external authentication against Active Directory. What must be considered about the authentication requirements? (Choose two.)

The ISE account must be a domain administrator in Active Directory to perform JOIN operations.

Active Directory only supports user authentication by using MSCHAPv2.

RADIUS communication must be permitted between the ISE server and the domain controller.

The ISE account must be a domain administrator in Active Directory to perform JOIN operations.

Active Directory only supports user authentication by using MSCHAPv2.

LDAP communication must be permitted between the ISE server and the domain controller.

Active Directory supports user and machine authentication by using MSCHAPv2.

Cisco 350-701 Practice Test 10 - Free Online Exam Prep & Questions

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

Cisco 350-701 Practice Test 10

Question

Cisco 350-701 Practice Tests

Practice Tests