In which scenario is endpoint-based security the solution?

performing signature-based application control

device profiling and authorization

performing signature-based application control

inspecting a password-protected archive

Refer to the exhibit. Refer to the exhibit. What is the result of the Python script?

It uses the POST HTTP method to obtain a token to be used for authentication.

It uses the POST HTTP method to obtain a username and password to be used for authentication.

It uses the POST HTTP method to obtain a token to be used for authentication.

It uses the GET HTTP method to obtain a token to be used for authentication.

It uses the GET HTTP method to obtain a username and password to be used for authentication

Why is it important to patch endpoints consistently?

Patching helps to mitigate vulnerabilities.

Patching reduces the attack surface of the infrastructure.

Patching helps to mitigate vulnerabilities.

Patching is required per the vendor contract.

Patching allows for creating a honeypot.

Which two parameters are used for device compliance checks? (Choose two.)

device operating system version

endpoint protection software version

device operating system version

Which Cisco cloud security software centrally manages policies on multiple platforms such as Cisco ASA, Cisco Firepower, Cisco Meraki, and AWS?

Cisco Configuration Professional

Which Cisco security solution determines if an endpoint has the latest OS updates and patches installed on the system?

Cisco Endpoint Security Analytics

Security Posture Assessment Service

An engineer is configuring device-hardening on a router in order to prevent credentials from being seen if the router configuration was compromised. Which command should be used?

username <username> privilege 15 password <password>

username < username> password <password>

Which security solution uses NetFlow to provide visibility across the network, data center, branch offices, and cloud?

Cisco Encrypted Traffic Analytics

How does a WCCP-configured router identify if the Cisco WSA is functional?

The WSA sends a Here-l-Am message every 10 seconds, and the router acknowledges with an ISee-You message.

If an ICMP ping fails three consecutive times between a router and the WSA, traffic is no longer transmitted to the router.

If an ICMP ping fails three consecutive times between a router and the WSA, traffic is no longer transmitted to the WSA.

The WSA sends a Here-l-Am message every 10 seconds, and the router acknowledges with an ISee-You message.

The router sends a Here-l-Am message every 10 seconds, and the WSA acknowledges with an ISee-You message.

Which solution supports high availability in routed or transparent mode as well as in northbound and southbound deployments?

Cisco Firepower NGFW physical appliance with Cisco. FMC

Cisco Firepower NGFW Virtual appliance with Cisco FMC

Which benefit does DMVPN provide over GETVPN?

DMVPN can be used over the public Internet, and GETVPN requires a private network.

DMVPN supports QoS, multicast, and routing, and GETVPN supports only QoS.

DMVPN is a tunnel-less VPN, and GETVPN is tunnel-based.

DMVPN supports non-IP protocols, and GETVPN supports only IP protocols.

DMVPN can be used over the public Internet, and GETVPN requires a private network.

An organization has DHCP servers set up to allocate IP addresses to clients on the LAN. What must be done to ensure the LAN switches prevent malicious DHCP traffic while also distributing IP addresses to the correct endpoints?

Configure DHCP snooping and set trusted interfaces for all client connections.

Configure Dynamic ARP inspection and add entries in the DHCP snooping database.

Configure DHCP snooping and set trusted interfaces for all client connections.

Configure Dynamic ARP inspection and antispoofing ACLs in the DHCP snooping database.

Configure DHCP snooping and set a trusted interface for the DHCP server

Which two parameters are used to prevent a data breach in the cloud? (Choose two.)

complex cloud-based web proxies

Which Cisco DNA Center Intent API action is used to retrieve the number of devices known to a DNA Center?

GET https://fqdnOrlPofDnaCenterPlatform/dna/intent/api/v1/network-device/count

GET https://fqdnOrlPofDnaCenterPlatform/dna/intent/api/v1/network-device

GEThttps://fqdnOrlPofDnaCenterPlatform/dna/intent/api/v1/networkdevice?parameter1=value¶meter2=value&....

GET https://fqdnOrlPofDnaCenterPlatform/dna/intent/api/v1/networkdevice/startIndex/recordsToReturn

An organization must add new firewalls to its infrastructure and wants to use Cisco ASA or Cisco FTD.The chosen firewalls must provide methods of blocking traffic that include offering the user the option to bypass the block for certain sites after displaying a warning page and to reset the connection.Which solution should the organization choose?

Cisco FTD because it enables interactive blocking and blocking with reset natively, whereas Cisco ASA does not

Cisco FTD because it supports system rate level traffic blocking, whereas Cisco ASA does not

Cisco ASA because it allows for interactive blocking and blocking with reset to be configured via the GUI, whereas Cisco FTD does not.

Cisco FTD because it enables interactive blocking and blocking with reset natively, whereas Cisco ASA does not

Cisco ASA because it has an additional module that can be installed to provide multiple blocking capabilities, whereas Cisco FTD does not.

An administrator needs to configure the Cisco ASA via ASDM such that the network management system can actively monitor the host using SNMPv3. Which two tasks must be performed for this configuration?(Choose two.)

Specify the SNMP manager and UDP port.

Which two functions does the Cisco Advanced Phishing Protection solution perform in trying to protect from phishing attacks? (Choose two.)

provides a defense for on-premises email deployments

determines if the email messages are malicious

blocks malicious websites and adds them to a block list

does a real-time user web browsing behavior analysis

provides a defense for on-premises email deployments

uses a static algorithm to determine malicious

determines if the email messages are malicious

What is a feature of NetFlow Secure Event Logging?

It exports only records that indicate significant events in a flow.

It filters NSEL events based on the traffic and event type through RSVP.

It delivers data records to NSEL collectors through NetFlow over TCP only.

It supports v5 and v8 templates.

What is a function of the Layer 4 Traffic Monitor on a Cisco WSA?

monitors suspicious traffic across all the TCP/UDP ports

blocks traffic from URL categories that are known to contain malicious content

decrypts SSL traffic to monitor for malicious content

monitors suspicious traffic across all the TCP/UDP ports

prevents data exfiltration by searching all the network traffic for specified sensitive information

Cisco 350-701 Practice Test 11 - Free Online Exam Prep & Questions

What are two ways a network administrator transparently identifies users using Active Directory on the Cisco WSA? (Choose two.)

Become a Premium Member for full access

Unlock Premium Member

Cisco 350-701 Practice Test 11

Question

Cisco 350-701 Practice Tests

Practice Tests