What does the Cloudlock Apps Firewall do to mitigate security concerns from an application perspective?

It discovers and controls cloud apps that are connected to a company's corporate environment.

It allows the administrator to quarantine malicious files so that the application can function, just not maliciously.

It discovers and controls cloud apps that are connected to a company's corporate environment.

It deletes any application that does not belong in the network.

It sends the application information to an administrator to act on.

What is the function of Cisco Cloudlock for data security?

user and entity behavior analytics

An administrator wants to ensure that all endpoints are compliant before users are allowed access on the corporate network. The endpoints must have the corporate antivirus application installed and be running the latest build of Windows 10.What must the administrator implement to ensure that all devices are compliant before they are allowed on the network?

Cisco Identity Services Engine and AnyConnect Posture module

Cisco Stealthwatch and Cisco Identity Services Engine integration

Cisco ASA firewall with Dynamic Access Policies configured

Cisco Identity Services Engine with PxGrid services enabled

An engineer used a posture check on a Microsoft Windows endpoint and discovered that the MS17- 010 patch was not installed, which left the endpoint vulnerable to WannaCry ransomware. Which two solutions mitigate the risk of this ransom ware infection? (Choose two)

Configure a posture policy in Cisco Identity Services Engine to install the MS17-010 patch before allowing access on the network.

Configure a posture policy in Cisco Identity Services Engine to check that an endpoint patch level is met before allowing access on the network.

Configure a posture policy in Cisco Identity Services Engine to install the MS17-010 patch before allowing access on the network.

Set up a profiling policy in Cisco Identity Service Engine to check and endpoint patch level before allowing access on the network.

Configure a posture policy in Cisco Identity Services Engine to check that an endpoint patch level is met before allowing access on the network.

Configure endpoint firewall policies to stop the exploit traffic from being allowed to run and replicate throughout the network.

Set up a well-defined endpoint patching strategy to ensure that endpoints have critical vulnerabilities patched in a timely fashion.

Which benefit is provided by ensuring that an endpoint is compliant with a posture policy configured in Cisco ISE?

It allows the endpoint to authenticate with 802.1x or MAB.

It verifies that the endpoint has the latest Microsoft security patches installed.

It adds endpoints to identity groups dynamically.

It allows CoA to be applied if the endpoint status is compliant.

What is a characteristic of Dynamic ARP Inspection?

DAI determines the validity of an ARP packet based on valid IP to MAC address bindings from the DHCP snooping binding database.

In a typical network, make all ports as trusted except for the ports connecting to switches, which are untrusted

DAI associates a trust state with each switch.

DAI intercepts all ARP requests and responses on trusted ports only.

What is a characteristic of traffic storm control behavior?

Traffic storm control drops all broadcast and multicast traffic if the combined traffic exceeds the level within the interval.

Traffic storm control cannot determine if the packet is unicast or broadcast.

Traffic storm control monitors incoming traffic levels over a 10-second traffic storm control interval.

Traffic storm control uses the Individual/Group bit in the packet source address to determine if the packet is unicast or broadcast.

Which command enables 802.1X globally on a Cisco switch?

authentication port-control aut

A network administrator configures Dynamic ARP Inspection on a switch. After Dynamic ARP Inspection is applied, all users on that switch are unable to communicate with any destination. The network administrator checks the interface status of all interfaces, and there is no err-disabled interface. What is causing this problem?

The no ip arp inspection trust command is applied on all user host interfaces

DHCP snooping has not been enabled on all VLANs.

The ip arp inspection limit command is applied on all interfaces and is blocking the traffic of all users.

Dynamic ARP Inspection has not been enabled on all VLANs

The no ip arp inspection trust command is applied on all user host interfaces

Which SNMPv3 configuration must be used to support the strongest security possible?

asa-host(config)#snmp-server group myv3 v3 priv asa-host(config)#snmp-server user andy myv3 auth sha cisco priv aes 256 ciscXXXXXXXX asa-host(config)#snmp-server host inside 10.255.254.1 version 3 andy

asa-host(config)#snmp-server group myv3 v3 priv asa-host(config)#snmp-server user andy myv3 auth sha cisco priv des ciscXXXXXXXX asa-host(config)#snmp-server host inside 10.255.254.1 version 3 andy

asa-host(config)#snmp-server group myv3 v3 noauth asa-host(config)#snmp-server user andy myv3 auth sha cisco priv aes 256 ciscXXXXXXXX asa-host(config)#snmp-server host inside 10.255.254.1 version 3 andy

asa-host(config)#snmpserver group myv3 v3 noauth asa-host(config)#snmp-server user andy myv3 auth sha cisco priv 3des ciscXXXXXXXX asa-host(config)#snmp-server host inside 10.255.254.1 version 3 andy

asa-host(config)#snmp-server group myv3 v3 priv asa-host(config)#snmp-server user andy myv3 auth sha cisco priv aes 256 ciscXXXXXXXX asa-host(config)#snmp-server host inside 10.255.254.1 version 3 andy

Refer to the exhibit. Which command was used to generate this output and to show which ports are authenticating with dot1x or mab?

show authentication registrations

Refer to the exhibit. What does the number 15 represent in this configuration?

access list that identifies the SNMP devices that can access the router

privilege level for an authorized user to this router

access list that identifies the SNMP devices that can access the router

interval in seconds between SNMPv3 authentication attempts

number of possible failed attempts until the SNMPv3 user is locked out

Under which two circumstances is a CoA issued? (Choose two)

An endpoint is deleted on the Identity Service Engine server.

An endpoint is profiled for the first time.

A new authentication rule was added to the policy on the Policy Service node.

An endpoint is deleted on the Identity Service Engine server.

A new Identity Source Sequence is created and referenced in the authentication policy.

An endpoint is profiled for the first time.

A new Identity Service Engine server is added to the deployment with the Administration persona

Refer to the exhibit. A network administrator configures command authorization for the admin5 user. What is the admin5 user able to do on HQ_Router after this configuration?

set the IP address of an interface

A network engineer has entered the snmp-server user andy myv3 auth sha cisco priv aes 256 cisc0380739941 command and needs to send SNMP information to a host at 10.255.254.1. Which command achieves this goal?

snmp-server host inside 10.255.254.1 version 3 andy

snmp-server host inside 10.255.254.1 version 3 myv3

snmp-server host inside 10.255.254.1 snmpv3 andy

snmp-server host inside 10.255.254.1 snmpv3 myv3

How is ICMP used an exfiltration technique?

by encrypting the payload in an ICMP packet to carry out command and control tasks on a compromised host

by flooding the destination host with unreachable packets

by sending large numbers of ICMP packets with a targeted hosts source IP address using an IP broadcast address

by encrypting the payload in an ICMP packet to carry out command and control tasks on a compromised host

by overwhelming a targeted host with ICMP echo-request packets

How is DNS tunneling used to exfiltrate data out of a corporate network?

It encodes the payload with random characters that are broken into short strings and the DNS server rebuilds the exfiltrated data.

It corrupts DNS servers by replacing the actual IP address with a rogue address to collect information or start other attacks.

It encodes the payload with random characters that are broken into short strings and the DNS server rebuilds the exfiltrated data.

It redirects DNS requests to a malicious server used to steal user credentials, which allows further damage and theft on the network.

It leverages the DNS server by permitting recursive lookups to spread the attack to other DNS servers.

Which two characteristics of messenger protocols make data exfiltration difficult to detect and prevent?(Choose two)

Traffic is encrypted, which prevents visibility on firewalls and IPS systems.

Messenger applications cannot be segmented with standard network controls

Outgoing traffic is allowed so users can communicate with outside organizations.

Malware infects the messenger application on the user endpoint to send company data.

Traffic is encrypted, which prevents visibility on firewalls and IPS systems.

An exposed API for the messaging platform is used to send large amounts of data.

Messenger applications cannot be segmented with standard network controls

Cisco 350-701 Practice Test 3 - Free Online Exam Prep & Questions

Home / Cisco / 350-701 / Practice Test 3

Ask Question

00:00:00

Show Answer

Training mode

Report Issue

Restart test

Question 1 / 40

In which cloud services model is the tenant responsible for virtual machine OS patching?

IaaS

UCaaS

PaaS

SaaS

Comment (0)

Cisco 350-701 Practice Test 3

Question

Cisco 350-701 Practice Tests

Practice Tests