What are two features of NetFlow flow monitoring? (Choose two)

Can track ingress and egress information

Can be used to track multicast, MPLS, or bridged traffic

Can track ingress and egress information

Include the flow record and the flow importer

Copies all ingress flow information to an interface

Does not required packet sampling on interfaces

Can be used to track multicast, MPLS, or bridged traffic

Which Talos reputation center allows for tracking the reputation of IP addresses for email and web traffic?

IP and Domain Reputation Center

An administrator is establishing a new site-to-site VPN connection on a Cisco IOS router. The organization needs to ensure that the ISAKMP key on the hub is used only for terminating traffic from the IP address of 172.19.20.24. Which command on the hub will allow the administrator to accomplish this?

crypto isakmp key Cisco0123456789 172.19.20.24

crypto ca identity 172.19.20.24

crypto isakmp key Cisco0123456789 172.19.20.24

crypto enrollment peer address 172.19.20.24

crypto isakmp identity address 172.19.20.24

What is a difference between an XSS attack and an SQL injection attack?

SQL injection attacks are used to steal information from databases whereas XSS attacks are used to redirect users to websites where attackers can steal data from them

SQL injection is a hacking method used to attack SQL databases, whereas XSS attacks can exist in many different types of applications

XSS is a hacking method used to attack SQL databases, whereas SQL injection attacks can exist in many different types of applications

SQL injection attacks are used to steal information from databases whereas XSS attacks are used to redirect users to websites where attackers can steal data from them

XSS attacks are used to steal information from databases whereas SQL injection attacks are used to redirect users to websites where attackers can steal data from them

An engineer has been tasked with configuring a Cisco FTD to analyze protocol fields and detect anomalies in the traffic from industrial systems. What must be done to meet these requirements?

Configure intrusion rules for the DNP3 preprocessor

Implement pre-filter policies for the CIP preprocessor

Enable traffic analysis in the Cisco FTD

Configure intrusion rules for the DNP3 preprocessor

Modify the access control policy to trust the industrial traffic

A company discovered an attack propagating through their network via a file. A custom file policy was created in order to track this in the future and ensure no other endpoints execute the infected file. In addition, it was discovered during testing that the scans are not detecting the file as an indicator of compromise. What must be done in order to ensure that the created is functioning as it should?

Upload the hash for the file into the policy

Create an IP block list for the website from which the file was downloaded

Block the application that the file was using to open

Upload the hash for the file into the policy

Send the file to Cisco Threat Grid for dynamic analysis

A network engineer is trying to figure out whether FlexVPN or DMVPN would fit better in their environment.They have a requirement for more stringent security multiple security associations for the connections, more efficient VPN establishment as well consuming less bandwidth. Which solution would be best for this and why?

FlexVPN because it uses multiple SAs and DMVPN does not

DMVPN because it supports IKEv2 and FlexVPN does not

FlexVPN because it supports IKEv2 and DMVPN does not

FlexVPN because it uses multiple SAs and DMVPN does not

DMVPN because it uses multiple SAs and FlexVPN does not

How does Cisco Workload Optimization Manager help mitigate application performance issues?

It deploys an AWS Lambda system

It sets up a workload forensic score

An organization configures Cisco Umbrella to be used for its DNS services. The organization must be able to block traffic based on the subnet that the endpoint is on but it sees only the requests from its public IP address instead of each internal IP address. What must be done to resolve this issue?

Set up a Cisco Umbrella virtual appliance to internally field the requests and see the traffic of each IP address

Use the tenant control features to identify each subnet being used and track the connections within the Cisco Umbrella dashboard

Install the Microsoft Active Directory Connector to give IP address information stitched to the requests in the Cisco Umbrella dashboard

Configure an internal domain within Cisco Umbrella to help identify each address and create policy from the domains

What is a difference between a DoS attack and a DDoS attack?

A DoS attack is where a computer is used to flood a server with TCP and UDP packets whereas a DDoS attack is where multiple systems target a single system with a DoS attack

A DoS attack is where a computer is used to flood a server with TCP and UDP packets whereas a DDoS attack is where a computer is used to flood multiple servers that are distributed over a LAN

A DoS attack is where a computer is used to flood a server with UDP packets whereas a DDoS attack is where a computer is used to flood a server with TCP packets

A DoS attack is where a computer is used to flood a server with TCP packets whereas a DDoS attack is where a computer is used to flood a server with UDP packets

Which two capabilities of Integration APIs are utilized with Cisco DNA center? (Choose two)

Upgrade software on switches and routers

Create new SSIDs on a wireless LAN controller

Automatically deploy new virtual routers

What is the purpose of CA in a PKI?

To issue and revoke digital certificates

To validate the authenticity of a digital certificate

To create the private key for a digital certificate

To certify the ownership of a public key by the named subject

What are two advantages of using Cisco Any connect over DMVPN? (Choose two)

It allows customization of access policies based on user identity

It enables VPN access for individual users from their machines

It provides spoke-to-spoke communications without traversing the hub

It allows different routing protocols to work over the tunnel

It allows customization of access policies based on user identity

It allows multiple sites to connect to the data center

It enables VPN access for individual users from their machines

When choosing an algorithm to us, what should be considered about Diffie Hellman and RSA for key establishment?

DH is on asymmetric key establishment algorithm intended to output symmetric keys

RSA is an asymmetric key establishment algorithm intended to output symmetric keys

RSA is a symmetric key establishment algorithm intended to output asymmetric keys

DH is a symmetric key establishment algorithm intended to output asymmetric keys

DH is on asymmetric key establishment algorithm intended to output symmetric keys

Which type of DNS abuse exchanges data between two computers even when there is no direct connection?

Command-and-control communication

What is a difference between GETVPN and IPsec?

GETVPN is based on IKEv2 and does not support IKEv1

GETVPN reduces latency and provides encryption over MPLS without the use of a central hub

GETVPN provides key management and security association management

GETVPN is based on IKEv2 and does not support IKEv1

GETVPN is used to build a VPN network with multiple sites without having to statically configure all devices

What is a benefit of using telemetry over SNMP to configure new routers for monitoring purposes?

Telemetry uses a push method which makes it faster than SNMP

Telemetry uses a pull mehod, which makes it more reliable than SNMP

Telemetry uses push and pull, which makes it more scalable than SNMP

Telemetry uses push and pull which makes it more secure than SNMP

Telemetry uses a push method which makes it faster than SNMP

An organization wants to use Cisco FTD or Cisco ASA devices. Specific URLs must be blocked from being accessed via the firewall which requires that the administrator input the bad URL categories that the organization wants blocked into the access policy. Which solution should be used to meet this requirement?

Cisco FTD because it includes URL filtering in the access control policy capabilities, whereas Cisco ASA does not

Cisco ASA because it enables URL filtering and blocks malicious URLs by default, whereas Cisco FTD does not

Cisco ASA because it includes URL filtering in the access control policy capabilities, whereas Cisco FTD does not

Cisco FTD because it includes URL filtering in the access control policy capabilities, whereas Cisco ASA does not

Cisco FTD because it enables URL filtering and blocks malicious URLs by default, whereas Cisco ASA does not

An administrator configures a Cisco WSA to receive redirected traffic over ports 80 and 443. The organization requires that a network device with specific WSA integration capabilities be configured to send the traffic to the WSA to proxy the requests and increase visibility, while making this invisible to the users. What must be done on the Cisco WSA to support these requirements?

Configure transparent traffic redirection using WCCP in the Cisco WSA and on the network device

Configure active traffic redirection using WPAD in the Cisco WSA and on the network device

Use the Layer 4 setting in the Cisco WSA to receive explicit forward requests from the network device

Use PAC keys to allow only the required network devices to send the traffic to the Cisco WSA

An administrator configures new authorization policies within Cisco ISE and has difficulty profiling the devices. Attributes for the new Cisco IP phones that are profiled based on the RADIUS authentication are seen however the attributes forCDP or DHCP are not. What should the administrator do to address this issue?

Configure the device sensor feature within the switch to send the appropriate protocol information

Configure the ip dhcp snooping trust command on the DHCP interfaces to get the information to Cisco ISE

Configure the authentication port-control auto feature within Cisco ISE to identify the devices that are trying to connect

Configure a service template within the switch to standardize the port configurations so that the correct information is sent to Cisco ISE

Configure the device sensor feature within the switch to send the appropriate protocol information

A network engineer must monitor user and device behavior within the on-premises network. This data must be sent to the Cisco Stealthwatch Cloud analytics platform for analysis. What must be done to meet this requirement using the Ubuntu-based VM appliance deployed in a VMware-based hypervisor?

Deploy the Cisco Stealthwatch Cloud PNM sensor that sends data to Cisco Stealthwatch Cloud

Configure a Cisco FMC to send syslogs to Cisco Stealthwatch Cloud

Deploy the Cisco Stealthwatch Cloud PNM sensor that sends data to Cisco Stealthwatch Cloud

Deploy a Cisco FTD sensor to send network events to Cisco Stealthwatch Cloud

Configure a Cisco FMC to send NetFlow to Cisco Stealthwatch Cloud

An organization uses Cisco FMC to centrally manage multiple Cisco FTD devices. The default management port conflicts with other communications on the network and must be changed. What must be done to ensure that all devices can communicate together?

Manually change the management port on Cisco FMC and all managed Cisco FTD devices

Set the tunnel to go through the Cisco FTD

Change the management port on Cisco FMC so that it pushes the change to all managed Cisco FTD devices

An engineer adds a custom detection policy to a Cisco AMP deployment and encounters issues with the configuration. The simple detection mechanism is configured, but the dashboard indicates that the hash is not 64 characters and is non-zero. What is the issue?

The engineer is attempting to upload a hash created using MD5 instead of SHA-256

The file being uploaded is incompatible with simple detections and must use advanced detections

The hash being uploaded is part of a set in an incorrect format

The engineer is attempting to upload a file instead of a hash

Refer to the exhibit. Refer to the exhibit. A Cisco ISE administrator adds a new switch to an 802.1X deployment and has difficulty with some endpoints gaining access.Most PCs and IP phones can connect and authenticate using their machine certificate credentials.However printer and video cameras cannot base d on the interface configuration provided, what must be to get these devices on to the network using Cisco ISE for authentication and authorization while maintaining security controls?

Add mab to the interface configuration.

Change the default policy in Cisco ISE to allow all devices not using machine authentication .

Enable insecure protocols within Cisco ISE in the allowed protocols configuration.

Configure authentication event fail retry 2 action authorize vlan 41 on the interface

Add mab to the interface configuration.

An administrator is adding a new switch onto the network and has configured AAA for network access control. When testing the configuration, the RADIUS authenticates to Cisco ISE but is being rejected. Why is the ip radius source- interface command needed for this configuration?

Only requests that originate from a configured NAS IP are accepted by a RADIUS server

The RADIUS authentication key is transmitted only from the defined RADIUS source interface

RADIUS requests are generated only by a router if a RADIUS source interface is defined.

Encrypted RADIUS authentication requires the RADIUS source interface be defined

Refer to the exhibit. What does this Python script accomplish?

lt authenticates to a Cisco ISE server using the username of ersad

It allows authentication with TLSv1 SSL protocol

It authenticates to a Cisco ISE with an SSH connection.

lt authenticates to a Cisco ISE server using the username of ersad

It lists the LDAP users from the external identity store configured on Cisco ISE

Cisco 350-701 Practice Test 8 - Free Online Exam Prep & Questions

Which type of encryption uses a public key and private key?

Asymmetric

Symmetric

Linear

Nonlinear

Comment (0)

Cisco 350-701 Practice Test 8

Question

Cisco 350-701 Practice Tests

Practice Tests