Which statement about the configuration of Cisco ASA NetFlow v9 Secure Event Logging is true?

A flow-export event type must be defined under a policy

To view bandwidth usage for NetFlow records, the QoS feature must be enabled.

A sysopt command can be used to enable NSEL on a specific interface.

NSEL can be used without a collector configured.

A flow-export event type must be defined under a policy

Which feature is supported when deploying Cisco ASAv within AWS public cloud?

user deployment of Layer 3 networks

Which statement describes a traffic profile on a Cisco Next Generation Intrusion Prevention System?

It defines a traffic baseline for traffic anomaly deduction.

It allows traffic if it does not meet the profile.

It defines a traffic baseline for traffic anomaly deduction.

It inspects hosts that meet the profile with more intrusion rules.

It blocks traffic if it does not meet the profile.

Which statement about IOS zone-based firewalls is true?

An interface can be assigned only to one zone.

An unassigned interface can communicate with assigned interfaces

Only one interface can be assigned to a zone.

An interface can be assigned to multiple zones.

An interface can be assigned only to one zone.

What is a characteristic of Cisco ASA Netflow v9 Secure Event Logging?

It tracks flow-create, flow-teardown, and flow-denied events.

It provides stateless IP flow tracking that exports all records of a specific flow.

It tracks the flow continuously and provides updates every 10 seconds.

Its events match all traffic classes in parallel.

Which CLI command is used to register a Cisco FirePower sensor to Firepower Management Center?

configure manager add <host><key

configure system add <host><key>

configure manager <key> add host

configure manager add <host><key

Refer to the exhibit. What is a result of the configuration?

Traffic from the inside and DMZ networks is redirected

Traffic from the DMZ network is redirected

Traffic from the inside network is redirected

Traffic from the inside and DMZ networks is redirected

Which two tasks allow NetFlow on a Cisco ASA 5500 Series firewall? (Choose two)

Apply NetFlow Exporter to the outside interface in the inbound direction.

Define a NetFlow collector by using the flow-export command

Create an ACL to allow UDP traffic on port 9996.

Apply NetFlow Exporter to the outside interface in the inbound direction.

Create a class map to match interesting traffic.

Define a NetFlow collector by using the flow-export command

What is a characteristic of Firepower NGIPS inline deployment mode?

It must have inline interface pairs configured.

ASA with Firepower module cannot be deployed.

It cannot take actions such as blocking traffic.

It is out-of-band from traffic.

It must have inline interface pairs configured.

An engineer wants to generate NetFlow records on traffic traversing the Cisco ASA. Which Cisco ASA command must be used?

ip flow-export destination 1.1.1.1 2055

flow-export destination inside 1.1.1.1 2055

ip flow-export destination 1.1.1.1 2055

Why would a user choose an on-premises ESA versus the CES solution?

Sensitive data must remain onsite.

The server team wants to outsource this service.

What is the purpose of the Decrypt for Application Detection feature within the WSA Decryption options?

It provides enhanced HTTPS application detection for AsyncOS.

It decrypts HTTPS application traffic for unauthenticated users.

It alerts users when the WSA decrypts their traffic.

It decrypts HTTPS application traffic for authenticated users.

It provides enhanced HTTPS application detection for AsyncOS.

Which two statements about a Cisco WSA configured in Transparent mode are true? (Choose two)

WCCP v2-enabled devices can automatically redirect traffic destined to port 80.

Layer 4 switches can automatically redirect traffic destined to port 80.

It can handle explicit HTTP requests.

It requires a PAC file for the client web browser.

It requires a proxy for the client web browser.

WCCP v2-enabled devices can automatically redirect traffic destined to port 80.

Layer 4 switches can automatically redirect traffic destined to port 80.

Which action controls the amount of URI text that is stored in Cisco WSA logs files?

Configure the advancedproxyconfig command with the HTTPS subcommand

Configure the datasecurityconfig command

Configure the advancedproxyconfig command with the HTTPS subcommand

Configure a small log-entry size.

Configure a maximum packet size.

Which Talos reputation center allows you to track the reputation of IP addresses for email and web traffic?

IP and Domain Reputation Center

After deploying a Cisco ESA on your network, you notice that some messages fail to reach their destinations.Which task can you perform to determine where each message was lost?

Configure the trackingconfig command to enable message tracking.

What is the primary benefit of deploying an ESA in hybrid mode?

It provides email security while supporting the transition to the cloud

You can fine-tune its settings to provide the optimum balance between security and performance for your environment

It provides the lowest total cost of ownership by reducing the need for physical appliances

It provides maximum protection and control of outbound messages

It provides email security while supporting the transition to the cloud

In which two ways does a system administrator send web traffic transparently to the Web Security Appliance?(Choose two)

configure policy-based routing on the network infrastructure

use Web Cache Communication Protocol

configure Active Directory Group Policies to push proxy settings

configure policy-based routing on the network infrastructure

reference a Proxy Auto Config file

configure the proxy IP address in the web-browser settings

use Web Cache Communication Protocol

Cisco 350-701 Practice Test 2 - Free Online Exam Prep & Questions

On Cisco Firepower Management Center, which policy is used to collect health modules alerts from managed devices?

A.

health policy

B.

system policy

C.

correlation policy

D.

access control policy

E.

health awareness policy

Cisco 350-701 Practice Test 2

Question

Cisco 350-701 Practice Tests

Practice Tests