An organization has two machines hosting web applications. Machine 1 is vulnerable to SQL injection while machine 2 is vulnerable to buffer overflows. What action would allow the attacker to gain access to machine 1 but not machine 2?

inserting malicious commands into the database

sniffing the packets between the two hosts

overflowing the buffer's memory

inserting malicious commands into the database

An engineer is trying to securely connect to a router and wants to prevent insecure algorithms from being used.However, the connection is failing. Which action should be taken to accomplish this goal?

Generate the RSA key using the crypto key generate rsa command.

Disable telnet using the no ip telnet command.

Enable the SSH server using the ip ssh server command.

Configure the port using the ip ssh port 22 command.

Generate the RSA key using the crypto key generate rsa command.

A network administrator is using the Cisco ESA with AMP to upload files to the cloud for analysis. The network is congested and is affecting communication. How will the Cisco ESA handle any files which need analysis?

AMP calculates the SHA-256 fingerprint, caches it, and periodically attempts the upload.

The file is queued for upload when connectivity is restored.

The ESA immediately makes another attempt to upload the file.

Refer to the exhibit. Which type of authentication is in use?

LDAP authentication for Microsoft Outlook

SMTP relay server authentication

external user and relay mail authentication

An organization received a large amount of SPAM messages over a short time period. In order to take action on the messages, it must be determined how harmful the messages are and this needs to happen dynamically.What must be configured to accomplish this?

Configure the Cisco ESA to modify policies based on the traffic seen

Configure the Cisco WSA to modify policies based on the traffic seen

Configure the Cisco ESA to receive real-time updates from Talos

Configure the Cisco WSA to receive real-time updates from Talos

Configure the Cisco ESA to modify policies based on the traffic seen

What are two differences between a Cisco WSA that is running in transparent mode and one running in explicit mode? (Choose two)

The Cisco WSA responds with its own IP address only if it is running in explicit mode.

The Cisco WSA uses a Layer 3 device to redirect traffic only if it is running in transparent mode.

When the Cisco WSA is running in transparent mode, it uses the WSA's own IP address as the HTTP request destination.

The Cisco WSA responds with its own IP address only if it is running in explicit mode.

The Cisco WSA is configured in a web browser only if it is running in transparent mode.

The Cisco WSA uses a Layer 3 device to redirect traffic only if it is running in transparent mode.

The Cisco WSA responds with its own IP address only if it is running in transparent mode.

After a recent breach, an organization determined that phishing was used to gain initial access to the network before regaining persistence. The information gained from the phishing attack was a result of users visiting known malicious websites. What must be done in order to prevent this from happening in the future?

Modify outbound malware scanning policies

What is the function of SDN southbound API protocols?

to enable the controller to make changes

to allow for the dynamic configuration of control plane applications

to enable the controller to make changes

to enable the controller to use REST

to allow for the static configuration of control plane applications

Refer to the exhibit. Traffic is not passing through IPsec site-to-site VPN on the Firepower Threat Defense appliance. What is causing this issue?

No split-tunnel policy is defined on the Firepower Threat Defense appliance.

The access control policy is not allowing VPN traffic in.

Site-to-site VPN peers are using different encryption algorithms.

Site-to-site VPN preshared keys are mismatched.

An attacker needs to perform reconnaissance on a target system to help gain access to it. The system has weak passwords, no encryption on the VPN links, and software bugs on the system's applications. Which vulnerability allows the attacker to see the passwords being transmitted in clear text?

weak passwords for authentication

What are two benefits of Flexible NetFlow records? (Choose two)

They allow the user to configure flow information to perform customized traffic identification

They converge multiple accounting technologies into one accounting mechanism

They allow the user to configure flow information to perform customized traffic identification

They provide attack prevention by dropping the traffic

They provide accounting and billing enhancements

They converge multiple accounting technologies into one accounting mechanism

They provide monitoring of a wider range of IP packet information from Layer 2 to 4

How does DNS Tunneling exfiltrate data?

An attacker registers a domain that a client connects to based on DNS records and sends malware through that connection.

An attacker opens a reverse DNS shell to get into the client's system and install malware on it.

An attacker uses a non-standard DNS port to gain access to the organization's DNS servers in order to poison the resolutions.

An attacker sends an email to the target with hidden DNS resolvers in it to redirect them to a malicious domain.

An organization is receiving SPAM emails from a known malicious domain. What must be configured in order to prevent the session during the initial TCP communication?

Configure the Cisco ESA to reset the TCP connection

Configure the Cisco ESA to drop the malicious emails

Configure policies to quarantine malicious emails

Configure policies to stop and reject communication

Configure the Cisco ESA to reset the TCP connection

An engineer has enabled LDAP accept queries on a listener. Malicious actors must be prevented from quickly identifying all valid recipients. What must be done on the Cisco ESA to accomplish this goal?

Configure Directory Harvest Attack Prevention

Configure incoming content filters

Configure Directory Harvest Attack Prevention

Bypass LDAP access queries in the recipient access table

What is a feature of Cisco NetFlow Secure Event Logging for Cisco ASAs?

Advanced NetFlow v9 templates and legacy v5 formatting are supported

Multiple NetFlow collectors are supported

Advanced NetFlow v9 templates and legacy v5 formatting are supported

Secure NetFlow connections are optimized for Cisco Prime Infrastructure

Which public cloud provider supports the Cisco Next Generation Firewall Virtual?

Red Hat Enterprise Visualization

What is the purpose of the My Devices Portal in a Cisco ISE environment?

to register new laptops and mobile devices

to request a newly provisioned mobile device

to provision userless and agentless systems

to manage and deploy antivirus definitions and patches on systems owned by the end user

Refer to the exhibit. An organization is using DHCP Snooping within their network. A user on VLAN 41 on a new switch is complaining that an IP address is not being obtained. Which command should be configured on the switch interface in order to provide the user with network connectivity?

ip dhcp snooping verify mac-address

What is the purpose of the certificate signing request when adding a new certificate for a server?

It provides the server information so a certificate can be created and signed

It is the password for the certificate that is needed to install it with.

It provides the server information so a certificate can be created and signed

It provides the certificate client information so the server can authenticate against it when installing

It is the certificate that will be loaded onto the server

How does Cisco Advanced Phishing Protection protect users?

It determines which identities are perceived by the sender

It validates the sender by using DKIM.

It determines which identities are perceived by the sender

It utilizes sensors that send messages securely.

It uses machine learning and real-time behavior analytics.

What is a benefit of using Cisco FMC over Cisco ASDM?

Cisco FMC provides centralized management while Cisco ASDM does not.

Cisco FMC uses Java while Cisco ASDM uses HTML5.

Cisco FMC provides centralized management while Cisco ASDM does not.

Cisco FMC supports pushing configurations to devices while Cisco ASDM does not.

Cisco FMC supports all firewall products whereas Cisco ASDM only supports Cisco ASA devices

What is a key difference between Cisco Firepower and Cisco ASA?

Cisco Firepower natively provides intrusion prevention capabilities while Cisco ASA does not.

Cisco ASA provides access control while Cisco Firepower does not.

Cisco Firepower provides identity-based access control while Cisco ASA does not.

Cisco Firepower natively provides intrusion prevention capabilities while Cisco ASA does not.

Cisco ASA provides SSL inspection while Cisco Firepower does not.

Cisco 350-701 Practice Test 5 - Free Online Exam Prep & Questions

What provides the ability to program and monitor networks from somewhere other than the DNAC GUI?

NetFlow

desktop client

ASDM

API

Comment (0)

Cisco 350-701 Practice Test 5

Question

Cisco 350-701 Practice Tests

Practice Tests