Refer to the exhibit. What are two indications of the Cisco Firepower Services Module configuration?(Choose two.)

The module is operating in IDS mode.

The module is operating in IPS mode.

The module is operating in IDS mode.

Traffic is blocked if the module fails.

The module is operating in IPS mode.

Why is it important for the organization to have an endpoint patching strategy?

so the latest security fixes are installed on the endpoints

so the organization can identify endpoint vulnerabilities

so the internal PSIRT organization is aware of the latest bugs

so the network administrator is notified when an existing bug is encountered

so the latest security fixes are installed on the endpoints

How does the Cisco WSA enforce bandwidth restrictions for web applications?

It sends commands to the uplink router to apply traffic policing to the application traffic.

It implements a policy route to redirect application traffic to a lower-bandwidth link.

It dynamically creates a scavenger class QoS policy and applies it to each client that connects through the WSA.

It sends commands to the uplink router to apply traffic policing to the application traffic.

It simulates a slower link by introducing latency into application traffic.

Which two components do southbound APIs use to communicate with downstream devices?(Choose two.)

services running over the network

applications running over the network

Which MDM configuration provides scalability?

BYOD support without extra appliance or licenses

pushing WPA2-Enterprise settings automatically to devices

enabling use of device features such as camera use

BYOD support without extra appliance or licenses

automatic device classification with level 7 fingerprinting

A network engineer has configured a NTP server on a Cisco ASA. The Cisco ASA has IP reachability to the NTP server and is not filtering any traffic. The show ntp association detail command indicates that the configured NTP server is unsynchronized and has a stratum of 16. What is the cause of this issue?

NTP is not configured to use a working server.

Resynchronization of NTP is not forced

NTP is not configured to use a working server.

An access list entry for UDP port 123 on the inside interface is missing.

An access list entry for UDP port 123 on the outside interface is missing.

When a next-generation endpoint security solution is selected for a company, what are two key deliverables that help justify the implementation? (Choose two.)

continuous monitoring of all files that are located on connected endpoints

real-time feeds from global threat intelligence centers

signature-based endpoint protection on company endpoints

macro-based protection to keep connected endpoints safe

continuous monitoring of all files that are located on connected endpoints

email integration to protect endpoints from malicious content that is located in email

real-time feeds from global threat intelligence centers

What do tools like Jenkins, Octopus Deploy, and Azure DevOps provide in terms of application and infrastructure automation?

continuous integration and continuous deployment

cloud application security broker

What is a feature of container orchestration?

ability to deploy Kubernetes clusters in air-gapped sites

ability to deploy Amazon ECS clusters by using the Cisco Container Platform data plane

ability to deploy Amazon EKS clusters by using the Cisco Container Platform data plane

ability to deploy Kubernetes clusters in air-gapped sites

What are two security benefits of an MDM deployment? (Choose two.)

robust security policy enforcement

What is the recommendation in a zero-trust model before granting access to corporate applications and resources?

to use multifactor authentication

to use a wired network, not wireless

to disconnect from the network when inactive

What is a benefit of using Cisco Tetration?

It collects enforcement data from servers and collects interpacket variation.

It collects telemetry data from servers and then uses software sensors to analyze flow information.

It collects policy compliance data and process details.

It collects enforcement data from servers and collects interpacket variation.

It collects near-real time data from servers and inventories the software packages that exist on servers.

How does Cisco Umbrella protect clients when they operate outside of the corporate network?

by using the Cisco Umbrella roaming client

by modifying the registry for DNS lookups

by using Active Directory group policies to enforce Cisco Umbrella DNS servers

by using the Cisco Umbrella roaming client

by forcing DNS queries to the corporate name servers

What are two facts about WSA HTTP proxy configuration with a PAC file? (Choose two.)

The PAC file, which references the proxy, is deployed to the client web browser.

It is defined as an Explicit proxy deployment.

It is defined as a Transparent proxy deployment.

In a dual-NIC configuration, the PAC file directs traffic through the two NICs to the proxy.

The PAC file, which references the proxy, is deployed to the client web browser.

It is defined as an Explicit proxy deployment.

It is defined as a Bridge proxy deployment.

Which function is included when Cisco AMP is added to web security?

detailed analytics of the unknown file's behavior

multifactor, authentication-based user identity

detailed analytics of the unknown file's behavior

threat prevention on an infected endpoint

A small organization needs to reduce the VPN bandwidth load on their headend Cisco ASA in order to ensure that bandwidth is available for VPN users needing access to corporate resources on the10.0.0.0/24 local HQ network. How is this accomplished without adding additional devices to the network?

Use split tunneling to tunnel traffic for the 10.0.0.0/24 network only.

Configure VPN load balancing to distribute traffic for the 10.0.0.0/24 network,

Configure VPN load balancing to send non-corporate traffic straight to the internet.

Use split tunneling to tunnel all traffic except for the 10.0.0.0/24 network.

Which solution detects threats across a private network, public clouds, and encrypted traffic?

Cisco Encrypted Traffic Analytics

Which two actions does the Cisco Identity Services Engine posture module provide that ensures endpoint security?(Choose two.)

The latest antivirus updates are applied before access is allowed.

A centralized management solution is deployed.

The latest antivirus updates are applied before access is allowed.

Assignments to endpoint groups are made dynamically, based on endpoint attributes.

Patch management remediation is performed.

A centralized management solution is deployed.

Endpoint supplicant configuration is deployed.

When a Cisco WSA checks a web request, what occurs if it is unable to match a user-defined policy?

It applies the next identification profile policy.

It applies the advanced policy.

Cisco 350-701 Practice Test 12 - Free Online Exam Prep & Questions

A network engineer entered the snmp-server user asmith myv7 auth sha cisco priv aes 256 cisc0xxxxxxxxx command and needs to send SNMP information to a host at 10.255.255.1. Which command achieves this goal?

Become a Premium Member for full access

Unlock Premium Member

Cisco 350-701 Practice Test 12

Question

Cisco 350-701 Practice Tests

Practice Tests