Which statement about the configuration of Cisco ASA NetFlow v9 Secure Event Logging is true?

A flow-export event type must be defined under a policy

To view bandwidth usage for NetFlow records, the QoS feature must be enabled.

A sysopt command can be used to enable NSEL on a specific interface.

NSEL can be used without a collector configured.

A flow-export event type must be defined under a policy

Which feature is supported when deploying Cisco ASAv within AWS public cloud?

user deployment of Layer 3 networks

Which statement describes a traffic profile on a Cisco Next Generation Intrusion Prevention System?

It defines a traffic baseline for traffic anomaly deduction.

It allows traffic if it does not meet the profile.

It defines a traffic baseline for traffic anomaly deduction.

It inspects hosts that meet the profile with more intrusion rules.

It blocks traffic if it does not meet the profile.

Which statement about IOS zone-based firewalls is true?

An interface can be assigned only to one zone.

An unassigned interface can communicate with assigned interfaces

Only one interface can be assigned to a zone.

An interface can be assigned to multiple zones.

An interface can be assigned only to one zone.

What is a characteristic of Cisco ASA Netflow v9 Secure Event Logging?

It tracks flow-create, flow-teardown, and flow-denied events.

It provides stateless IP flow tracking that exports all records of a specific flow.

It tracks the flow continuously and provides updates every 10 seconds.

Its events match all traffic classes in parallel.

Which CLI command is used to register a Cisco FirePower sensor to Firepower Management Center?

configure manager add <host><key

configure system add <host><key>

configure manager <key> add host

configure manager add <host><key

Refer to the exhibit. What is a result of the configuration?

Traffic from the inside and DMZ networks is redirected

Traffic from the DMZ network is redirected

Traffic from the inside network is redirected

Traffic from the inside and DMZ networks is redirected

Which two tasks allow NetFlow on a Cisco ASA 5500 Series firewall? (Choose two)

Apply NetFlow Exporter to the outside interface in the inbound direction.

Define a NetFlow collector by using the flow-export command

Create an ACL to allow UDP traffic on port 9996.

Apply NetFlow Exporter to the outside interface in the inbound direction.

Create a class map to match interesting traffic.

Define a NetFlow collector by using the flow-export command

What is a characteristic of Firepower NGIPS inline deployment mode?

It must have inline interface pairs configured.

ASA with Firepower module cannot be deployed.

It cannot take actions such as blocking traffic.

It is out-of-band from traffic.

It must have inline interface pairs configured.

An engineer wants to generate NetFlow records on traffic traversing the Cisco ASA. Which Cisco ASA command must be used?

ip flow-export destination 1.1.1.1 2055

flow-export destination inside 1.1.1.1 2055

ip flow-export destination 1.1.1.1 2055

Why would a user choose an on-premises ESA versus the CES solution?

Sensitive data must remain onsite.

The server team wants to outsource this service.

What is the purpose of the Decrypt for Application Detection feature within the WSA Decryption options?

It provides enhanced HTTPS application detection for AsyncOS.

It decrypts HTTPS application traffic for unauthenticated users.

It alerts users when the WSA decrypts their traffic.

It decrypts HTTPS application traffic for authenticated users.

It provides enhanced HTTPS application detection for AsyncOS.

Which two statements about a Cisco WSA configured in Transparent mode are true? (Choose two)

WCCP v2-enabled devices can automatically redirect traffic destined to port 80.

Layer 4 switches can automatically redirect traffic destined to port 80.

It can handle explicit HTTP requests.

It requires a PAC file for the client web browser.

It requires a proxy for the client web browser.

WCCP v2-enabled devices can automatically redirect traffic destined to port 80.

Layer 4 switches can automatically redirect traffic destined to port 80.

Which action controls the amount of URI text that is stored in Cisco WSA logs files?

Configure the advancedproxyconfig command with the HTTPS subcommand

Configure the datasecurityconfig command

Configure the advancedproxyconfig command with the HTTPS subcommand

Configure a small log-entry size.

Configure a maximum packet size.

Which Talos reputation center allows you to track the reputation of IP addresses for email and web traffic?

IP and Domain Reputation Center

After deploying a Cisco ESA on your network, you notice that some messages fail to reach their destinations.Which task can you perform to determine where each message was lost?

Configure the trackingconfig command to enable message tracking.

What is the primary benefit of deploying an ESA in hybrid mode?

It provides email security while supporting the transition to the cloud

You can fine-tune its settings to provide the optimum balance between security and performance for your environment

It provides the lowest total cost of ownership by reducing the need for physical appliances

It provides maximum protection and control of outbound messages

It provides email security while supporting the transition to the cloud

In which two ways does a system administrator send web traffic transparently to the Web Security Appliance?(Choose two)

configure policy-based routing on the network infrastructure

use Web Cache Communication Protocol

configure Active Directory Group Policies to push proxy settings

configure policy-based routing on the network infrastructure

reference a Proxy Auto Config file

configure the proxy IP address in the web-browser settings

use Web Cache Communication Protocol

Cisco 350-701 Practice Test 2 - Free Online Exam Questions 41-80

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

Cisco 350-701 Practice Test 2

Question

Drag and Drop

Hot Area

Cisco 350-701 Practice Tests

Practice Tests