What is a characteristic of an EDR solution and not of an EPP solution?

decrypts SSL traffic for better visibility

performs signature-based detection

What is a benefit of using GET VPN over FlexVPN within a VPN deployment?

GET VPN natively supports MPLS and private IP networks

GET VPN supports Remote Access VPNs

GET VPN natively supports MPLS and private IP networks

GET VPN uses multiple security associations for connections

GET VPN interoperates with non-Cisco devices

Which Cisco DNA Center RESTful PNP API adds and claims a device into a workflow?

api/v1/onboarding/pnp-device/import

What is the purpose of a NetFlow version 9 template record?

lt defines the format of data records.

It specifies the data format of NetFlow processes.

It provides a standardized set of information about an IP flow.

lt defines the format of data records.

It serves as a unique identification number to distinguish individual data records

Which Cisco solution integrates Encrypted Traffic Analytics to perform enhanced visibility,promote compliance,shorten response times, and provide administrators with the information needed to provide educated and automated decisions to secure the environment?

Cisco Security Compiance Solution

Which feature does the laaS model provide?

automatic updates and patching of software

dedicated, restricted workstations

automatic updates and patching of software

software-defined network segmentation

What is a benefit of flexible NetFlow records?

They have customized traffic identification

They monitor a packet from Layer 2 to Layer 5

They have customized traffic identification

What is the purpose of the Cisco Endpoint loC feature?

lt is an incident response tool 6W

It provides stealth threat prevention.

lt is a signature-based engine. W

lt is an incident response tool 6W

It provides precompromise detection.

An engineer recently completed the system setup on a Cisco WSA Which URL information does the system send to SensorBase Network servers?

complete URL,without obfuscating the path segments

Summarized server-name information and MD5-hashed path information

complete URL,without obfuscating the path segments

URL information collected from clients that connect to the Cisco WSA using Cisco AnyConnect

none because SensorBase Network Participation is disabled by default

What does endpoint isolation in Cisco AMP for Endpoints security protect from?

an infection spreading across the LDAP or Active Directory domain from a user account

an infection spreading across the network E

a malware spreading across the user device

an infection spreading across the LDAP or Active Directory domain from a user account

a malware spreading across the LDAP or Active Directory domain from a user account

What is a functional difference between Cisco AMP for Endpoints and Cisco Umbrella Roaming Client?

AMP for Endpoints stops and tracks malicious activity on hosts, and the Umbrella Roaming Client tracks only URL-based threats.

The Umbrella Roaming client stops and tracks malicious activity on hosts, and AMP for Endpoints tracks only URL-based threats.

The Umbrella Roaming Client authenticates users and provides segmentation, and AMP for Endpoints allows only for VPN connectivity

AMP for Endpoints authenticates users and provides segmentation, and the Umbrella Roaming Client allows only for VPN connectivity.

AMP for Endpoints stops and tracks malicious activity on hosts, and the Umbrella Roaming Client tracks only URL-based threats.

What is the difference between EPP and EDR?

Having an EPP solution allows an engineer to detect, investigate, and remediate modern threats.

EPP focuses primarily on threats that have evaded front-line defenses that entered the environment.

Having an EPP solution allows an engineer to detect, investigate, and remediate modern threats.

EDR focuses solely on prevention at the perimeter.

Having an EDR solution gives an engineer the capability to flag offending files at the first sign of malicious behavior.

What are two recommended approaches to stop DNS tunneling for data exfiltration and command and control call backs? (Choose two.)

Use intrusion prevention system.

Which two capabilities does an MDM provide? (Choose two.)

unified management of mobile devices, Macs, and PCs from a centralized dashboard

enforcement of device security policies from a centralized dashboard

delivery of network malware reports to an inbox in a schedule

unified management of mobile devices, Macs, and PCs from a centralized dashboard

enforcement of device security policies from a centralized dashboard

manual identification and classification of client devices

unified management of Android and Apple devices from a centralized dashboard

In which two ways does the Cisco Advanced Phishing Protection solution protect users? (Choose two.)

It prevents all zero-day attacks coming from the Internet.

It automatically removes malicious emails from users' inbox.

It prevents use of compromised accounts and social engineering.

It prevents all zero-day attacks coming from the Internet.

It automatically removes malicious emails from users' inbox.

It prevents trojan horse malware using sensors.

It secures all passwords that are shared in video conferences.

An engineer is adding a Cisco router to an existing environment. NTP authentication is configured on all devices in the environment with the command ntp authentication-key 1 md5 Clsc427128380.There are two routers on the network that are configured as NTP servers for redundancy, 192.168.1.110 and 192.168.1.111. 192.168.1.110 is configured as the authoritative time source.What command must be configured on the new router to use 192.168.1.110 as its primary time source without the new router attempting to offer time to existing devices?

ntp server 192.168.1.110 primary key 1

ntp peer 192.168.1.110 prefer key 1

ntp server 192.168.1.110 key 1 prefer

ntp peer 192.168.1.110 key 1 primary

Which ESA implementation method segregates inbound and outbound email?

one listener on one logical IPv4 address on a single logical interface

one listener on a single physical Interface

pair of logical listeners on a single physical interface with two unique logical IPv4 addresses and one IPv6 address

pair of logical IPv4 listeners and a pair Of IPv6 listeners on two physically separate interfaces

one listener on one logical IPv4 address on a single logical interface

During a recent security audit a Cisco IOS router with a working IPSEC configuration using IKEv1 was flagged for using a wildcard mask with the crypto isakmp key command The VPN peer is a SOHO router with a dynamically assigned IP address Dynamic DNS has been configured on the SOHO router to map the dynamic IP address to the host name of vpn sohoroutercompany.com In addition to the command crypto isakmp key Cisc425007536 hostname vpn.sohoroutercompany.com what other two commands are now required on the Cisco IOS router for the VPN to continue to function after the wildcard command is removed? (Choose two)

crypto isakmp identity hostname

Add the dynamic keyword to the existing crypto map command

ip host vpn.sohoroutercompany.eom <VPN Peer IP Address>

crypto isakmp identity hostname

Add the dynamic keyword to the existing crypto map command

fqdn vpn.sohoroutercompany.com <VPN Peer IP Address>

ip name-server <DNS Server IP Address>

Which command is used to log all events to a destination colector 209.165.201.107?

CiscoASA(config-pmap-c)#flow-export event-type all destination 209.165.201.10

CiscoASA(config-pmap-c)#flow-export event-type flow-update destination 209.165.201.10

CiscoASA(config-cmap)# flow-export event-type all destination 209.165.201.

CiscoASA(config-pmap-c)#flow-export event-type all destination 209.165.201.10

CiscoASA(config-cmap)#flow-export event-type flow-update destination 209.165.201.10

What are two functions of IKEv1 but not IKEv2? (Choose two)

With IKEv1, mode negotiates faster than main mode

IKEv1 conversations are initiated by the IKE_SA_INIT message

NAT-T is supported in IKEv1 but rot in IKEv2.

With IKEv1, when using aggressive mode, the initiator and responder identities are passed cleartext

With IKEv1, mode negotiates faster than main mode

IKEv1 conversations are initiated by the IKE_SA_INIT message

Which threat intelligence standard contains malware hashes?

structured threat information expression

trusted automated exchange or indicator information

A company identified a phishing vulnerability during a pentest What are two ways the company can protect employees from the attack? (Choose two.)

using an inline IPS/IDS in the network

Refer to the exhibit. What is the result of using this authentication protocol in the configuration?

The authentication and authorization requests are grouped in a single packet.

The authentication request contains only a username.

The authentication request contains only a password.

There are separate authentication and authorization request packets.

The authentication and authorization requests are grouped in a single packet.

Cisco 350-701 Practice Test 14 - Free Online Exam Prep & Questions

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

Cisco 350-701 Practice Test 14

Question

Cisco 350-701 Practice Tests

Practice Tests