What is an advantage of the Cisco Umbrella roaming client?

visibility into IP-based threats by tunneling suspicious IP connections

the ability to see all traffic without requiring TLS decryption

visibility into IP-based threats by tunneling suspicious IP connections

the ability to dynamically categorize traffic to previously uncategorized sites

visibility into traffic that is destined to sites within the office environment

What is a function of Cisco AMP for Endpoints?

It automates threat responses of an infected host

It protects against web-based attacks

It automates threat responses of an infected host

An engineer is implementing DHCP security mechanisms and needs the ability to add additional attributes to profiles that are created within Cisco ISE Which action accomplishes this task?

Configure DHCP snooping on the switch VLANs and trust the necessary interfaces

Define MAC-to-lP address mappings in the switch to ensure that rogue devices cannot get an IP address

Use DHCP option 82 to ensure that the request is from a legitimate endpoint and send the information to Cisco ISE

Modify the DHCP relay and point the IP address to Cisco ISE.

Configure DHCP snooping on the switch VLANs and trust the necessary interfaces

Refer to the exhibit When configuring this access control rule in Cisco FMC, what happens with the traffic destined to the DMZ_inside zone once the configuration is deployed?

All traffic from any zone to the DMZ_inside zone will be permitted with no further inspection

No traffic will be allowed through to the DMZ_inside zone regardless of if it's trusted or not

All traffic from any zone will be allowed to the DMZ_inside zone only after inspection

No traffic will be allowed through to the DMZ_inside zone unless it's already trusted

An engineer is trying to decide whether to use Cisco Umbrella, Cisco CloudLock, Cisco Stealthwatch, or Cisco AppDynamics Cloud Monitoring for visibility into data transfers as well as protection against data exfiltration Which solution best meets these requirements?

Cisco AppDynamics Cloud Monitoring

An engineer is configuring cloud logging using a company-managed Amazon S3 bucket for Cisco Umbrella logs. What benefit does this configuration provide for accessing log data?

Data can be stored offline for 30 days.

It is included m the license cost for the multi-org console of Cisco Umbrella

It can grant third-party SIEM integrations write access to the S3 bucket

No other applications except Cisco Umbrella can write to the S3 bucket

Data can be stored offline for 30 days.

For a given policy in Cisco Umbrella, how should a customer block website based on a custom list?

by adding the websites to a blocked type destination list

by specifying blocked domains in me policy settings

by specifying the websites in a custom blocked category

by adding the websites to a blocked type destination list

by adding the website IP addresses to the Cisco Umbrella blocklist

A company recently discovered an attack propagating throughout their Windows network via a file named abc428565580xyz exe The malicious file was uploaded to a Simple Custom Detection list in the AMP for Endpoints Portal and the currently applied policy for the Windows clients was updated to reference the detection list Verification testing scans on known infected systems shows that AMP for Endpoints is not detecting the presence of this file as an indicator of compromise What must be performed to ensure detection of the malicious file?

Upload the SHA-256 hash for the file to the Simple Custom Detection List

Upload the malicious file to the Blocked Application Control List

Use an Advanced Custom Detection List instead of a Simple Custom Detection List

Check the box in the policy configuration to send the file to Cisco Threat Grid for dynamic analysis

Upload the SHA-256 hash for the file to the Simple Custom Detection List

Which two configurations must be made on Cisco ISE and on Cisco TrustSec devices to force a session to be adjusted after a policy change is made? (Choose two)

aaa server radius dynamic-author

aaa authorization exec default local

tacacs-server host 10.1.1.250 key password

aaa server radius dynamic-author

An organization uses Cisco FMC to centrally manage multiple Cisco FTD devices The default management port conflicts with other communications on the network and must be changed. What must be done to ensure that all devices can communicate together?

Manually change the management port on Cisco FMC and all managed Cisco FTD devices

Set the sftunnel to go through the Cisco FTD

Change the management port on Cisco FMC so that it pushes the change to all managed Cisco FTD devices

Manually change the management port on Cisco FMC and all managed Cisco FTD devices

What is the concept of Cl/CD pipelining?

The project is split into several phases where one phase cannot start before the previous phase finishes successfully.

The project code is centrally maintained and each code change should trigger an automated build and test sequence

The project is split into time-limited cycles and focuses on pair programming for continuous code review

Each project phase is independent from other phases to maintain adaptiveness and continual improvement

Why should organizations migrate to a multifactor authentication strategy?

Single methods of authentication can be compromised more easily than multifactor authentication

Multifactor authentication methods of authentication are never compromised

Biometrics authentication leads to the need for multifactor authentication due to its ability to be hacked easily

Multifactor authentication does not require any piece of evidence for an authentication mechanism

Single methods of authentication can be compromised more easily than multifactor authentication

An engineer needs to configure a Cisco Secure Email Gateway (SEG) to prompt users to enter multiple forms of identification before gaining access to the SEG. The SEG must also join a cluster using the preshared key of cisc421555367. What steps must be taken to support this?

Enable two-factor authentication through a RADIUS server, and then join the cluster via the SEG CLI

Enable two-factor authentication through a RADIUS server, and then join the cluster via the SEG GUI.

Enable two-factor authentication through a TACACS+ server, and then join the cluster via the SEG CLI.

Enable two-factor authentication through a RADIUS server, and then join the cluster via the SEG CLI

Enable two-factor authentication through a TACACS+ server, and then join the cluster via the SEG GUI.

What does Cisco ISE use to collect endpoint attributes that are used in profiling?

Cisco AnyConnect Secure Mobility Client

Which threat intelligence standard contains malware hashes?

structured threat information expression

trusted automated exchange of indicator information

Which two commands are required when configuring a flow-export action on a Cisco ASA? (Choose two.)

flow-export template timeout-rate 15

Which action must be taken in the AMP for Endpoints console to detect specific MD5 signatures on endpoints and then quarantine the files?

Configure an advanced custom detection list.

Configure an IP Block & Allow custom detection list

Configure an application custom detection list

Configure a simple custom detection list

What is the purpose of the Cisco Endpoint IoC feature?

It is an incident response tool.

It provides stealth threat prevention.

It is a signature-based engine.

It provides precompromise detection.

An organization is using DNS services for their network and want to help improve the security of the DNS infrastructure. Which action accomplishes this task?

Configure Cisco Umbrella and use DNSSEC for domain authentication to authoritative servers.

Use DNSSEC between the endpoints and Cisco Umbrella DNS servers.

Modify the Cisco Umbrella configuration to pass queries only to non-DNSSEC capable zones.

Integrate Cisco Umbrella with Cisco CloudLock to ensure that DNSSEC is functional.

Configure Cisco Umbrella and use DNSSEC for domain authentication to authoritative servers.

A security engineer must add destinations into a destination list in Cisco Umbrella. What describes the application of these changes?

The changes are applied immediately it the destination list is part or a policy.

The destination list must be removed from the policy before changes are made to It.

The changes are applied only after the configuration is saved in Cisco Umbrella.

The user role of Block Page Bypass or higher is needed to perform these changes.

Cisco 350-701 Practice Test 15 - Free Online Exam Prep & Questions

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

Cisco 350-701 Practice Test 15

Question

Cisco 350-701 Practice Tests

Practice Tests