Cisco 350-701 Practice Test - Questions Answers, Page 41
Question list
Related questions
What are two ways a network administrator transparently identifies users using Active Directory on the Cisco WSA? (Choose two.)
Create an LDAP authentication realm and disable transparent user identification.
Create NTLM or Kerberos authentication realm and enable transparent user identification.
Deploy a separate Active Directory agent such as Cisco Context Directory Agent.
The eDirectory client must be installed on each client workstation.
Deploy a separate eDirectory server; the dent IP address is recorded in this server.
Which baseline form of telemetry is recommended for network infrastructure devices?
SDNS
NetFlow
passive taps
SNMP
In which scenario is endpoint-based security the solution?
inspecting encrypted traffic
device profiling and authorization
performing signature-based application control
inspecting a password-protected archive
Refer to the exhibit.
Refer to the exhibit. What is the result of the Python script?
It uses the POST HTTP method to obtain a username and password to be used for authentication.
It uses the POST HTTP method to obtain a token to be used for authentication.
It uses the GET HTTP method to obtain a token to be used for authentication.
It uses the GET HTTP method to obtain a username and password to be used for authentication
Why is it important to patch endpoints consistently?
Patching reduces the attack surface of the infrastructure.
Patching helps to mitigate vulnerabilities.
Patching is required per the vendor contract.
Patching allows for creating a honeypot.
Which two parameters are used for device compliance checks? (Choose two.)
endpoint protection software version
Windows registry values
DHCP snooping checks
DNS integrity checks
device operating system version
Which Cisco cloud security software centrally manages policies on multiple platforms such as Cisco ASA, Cisco Firepower, Cisco Meraki, and AWS?
Cisco Defense Orchestrator
Cisco Configuration Professional
Cisco Secureworks
Cisco DNAC
Which Cisco security solution determines if an endpoint has the latest OS updates and patches installed on the system?
Cisco Endpoint Security Analytics
Cisco AMP for Endpoints
Endpoint Compliance Scanner
Security Posture Assessment Service
A network administrator is configuring a role in an access control policy to block certain URLs and selects the "Chat and instant Messaging" category. which reputation score should be selected to accomplish this goal?
3
5
10
1
Refer to the exhibit.
The DHCP snooping database resides on router R1, and dynamic ARP inspection is configured only on switch SW2. Which ports must be configured as untrusted so that dynamic ARP inspection operates normally?
P2 and P3 only
P5, P6, and P7 only
P1, P2, P3, and P4 only
P2, P3, and P6 only
Question