Which function is the primary function of Cisco AMP threat Grid?

applying a real-time URI blacklist

What is a required prerequisite to enable malware file scanning for the Secure Internet Gateway?

Activate the Advanced Malware Protection license

When wired 802.1X authentication is implemented, which two components are required? (Choose two)

authentication server: Cisco Identity Service Engine

authenticator: Cisco Catalyst switch

authentication server: Cisco Identity Service Engine

supplicant: Cisco AnyConnect ISE Posture module

authenticator: Cisco Catalyst switch

authenticator: Cisco Identity Services Engine

authentication server: Cisco Prime Infrastructure

Refer to the exhibit. Which statement about the authentication protocol used in the configuration is true?

The authentication and authorization requests are grouped in a single packet

The authentication request contains only a password

The authentication request contains only a username

The authentication and authorization requests are grouped in a single packet

There are separate authentication and authorization request packets

Which Cisco command enables authentication, authorization, and accounting globally so that CoA is supported on the device?

aaa server radius dynamic-author

An MDM provides which two advantages to an organization with regards to device management?(Choose two)

Active Directory group policy management

Which benefit does endpoint security provide the overall security posture of an organization?

It allows the organization to detect and mitigate threats that the perimeter security devices do not detect.

It streamlines the incident response process to automatically perform digital forensics on the endpoint.

It allows the organization to mitigate web-based attacks as long as the user is active in the domain.

It allows the organization to detect and respond to threats at the edge of the network.

It allows the organization to detect and mitigate threats that the perimeter security devices do not detect.

What is the primary difference between an Endpoint Protection Platform and an Endpoint Detection and Response?

EPP focuses on prevention, and EDR focuses on advanced threats that evade perimeter defenses.

EDR focuses on prevention, and EPP focuses on advanced threats that evade perimeter defenses.

EPP focuses on network security, and EDR focuses on device security.

EDR focuses on network security, and EPP focuses on device security.

What are two reasons for implementing a multifactor authentication solution such as Duo Security provide to an organization? (Choose two)

flexibility of different methods of 2FA such as phone callbacks, SMS passcodes, and push notifications

secure access to on-premises and cloud applications

flexibility of different methods of 2FA such as phone callbacks, SMS passcodes, and push notifications

single sign-on access to on-premises and cloud applications

integration with 802.1x security using native Microsoft Windows supplicant

secure access to on-premises and cloud applications

identification and correction of application vulnerabilities before allowing access to resources

An engineer configured a new network identity in Cisco Umbrella but must verify that traffic is being routed through the Cisco Umbrella network. Which action tests the routing?

Enable the Intelligent Proxy to validate that traffic is being routed correctly.

Ensure that the client computers are pointing to the on-premises DNS servers.

Enable the Intelligent Proxy to validate that traffic is being routed correctly.

Add the public IP address that the client computers are behind to a Core Identity.

Browse to http://welcome.umbrella.com/ to validate that the new identity is working.

How is Cisco Umbrella configured to log only security events?

in the Security Settings section

per network in the Deployments section

How does Cisco Umbrella archive logs to an enterprise owned storage?

by being configured to send logs to a self-managed AWS S3 bucket

by using the Application Programming Interface to fetch the logs

by sending logs via syslog to an on-premises or cloud-based syslog server

by the system administrator downloading the logs from the Cisco Umbrella web portal

by being configured to send logs to a self-managed AWS S3 bucket

How does Cisco Stealthwatch Cloud provide security for cloud environments?

It delivers visibility and threat detection.

It prevents exfiltration of sensitive data.

It assigns Internet-based DNS protection for clients and servers.

It facilitates secure connectivity between public and private networks.

What are two Detection and Analytics Engines of Cognitive Threat Analytics? (Choose two)

command and control communication

Which solution combines Cisco IOS and IOS XE components to enable administrators to recognize applications, collect and send network metrics to Cisco Prime and other third-party management tools, and prioritize application traffic?

Cisco Application Visibility and Control

What must be used to share data between multiple security products?

Cisco Advanced Malware Protection

Which Cisco product is open, scalable, and built on IETF standards to allow multiple security products from Cisco and other vendors to share data and interoperate with each other?

Multifactor Platform Integration

What is the function of the Context Directory Agent?

reads the Active Directory logs to map IP addresses to usernames

maintains users' group memberships

relays user authentication requests from Web Security Appliance to Active Directory

reads the Active Directory logs to map IP addresses to usernames

accepts user authentication requests on behalf of Web Security Appliance for user identification

What is a characteristic of a bridge group in ASA Firewall transparent mode?

It includes multiple interfaces and access rules between interfaces are customizable

It is a Layer 3 segment and includes one port and customizable access rules

It allows ARP traffic with a single access rule

It has an IP address on its BVI interface and is used for management traffic

When Cisco and other industry organizations publish and inform users of known security findings and vulnerabilities, which name is used?

Common Vulnerabilities and Exposures

Common Exploits and Vulnerabilities

Common Vulnerabilities, Exploits and Threats

Cisco 350-701 Practice Test 4 - Free Online Exam Prep & Questions

Which capability is exclusive to a Cisco AMP public cloud instance as compared to a private cloud instance?

RBAC

ETHOS detection engine

SPERO detection engine

TETRA detection engine

Comment (0)

Cisco 350-701 Practice Test 4

Question

Cisco 350-701 Practice Tests

Practice Tests