Home

Home / Cisco / 350-701

Question list

List of questions

Question 1

(0)

In which form of attack is alternate encoding, such as hexadecimal representation, most often observed?

Question 2

(0)

Which flaw does an attacker leverage when exploiting SQL injection vulnerabilities?

Question 3

(0)

Which two prevention techniques are used to mitigate SQL injection attacks? (Choose two)

Question 4

(0)

Which two endpoint measures are used to minimize the chances of falling victim to phishing and social engineering attacks? (Choose two)

Question 5

(0)

Which two mechanisms are used to control phishing attacks? (Choose two)

Question 6

(0)

Which two behavioral patterns characterize a ping of death attack? (Choose two)

Question 7

(0)

Which two preventive measures are used to control cross-site scripting? (Choose two)

Question 8

(0)

What is the difference between deceptive phishing and spear phishing?

Question 9

(0)

Which attack is commonly associated with C and C++ programming languages?

Question 10

(0)

What is a language format designed to exchange threat intelligence that can be transported over the TAXII protocol?

Open VPLUS File

Convert VPLUS to PDF

Related questions

Which compliance status is shown when a configured posture policy requirement is not met?

An engineer is configuring device-hardening on a router in order to prevent credentials from being seen if the router configuration was compromised. Which command should be used?

Which Cisco platform onboards the endpoint and can issue a CA signed certificate while also automatically configuring endpoint network settings to use the signed endpoint certificate, allowing the endpoint to gain network access?

Which two features are used to configure Cisco ESA with a multilayer approach to fight viruses and malware? (Choose two)

Which two application layer preprocessors are used by Firepower Next Generation Intrusion Prevention System? (Choose two)

DRAG DROP Drag and drop the capabilities of Cisco Firepower versus Cisco AMP from the left into the appropriate category on the right.

Which ASA deployment mode can provide separation of management on a shared appliance?

Which PKI enrollment method allows the user to separate authentication and enrollment actions and also provides an option to specify HTTP/TFTP commands to perform file retrieval from the server?

An administrator is configuring N I P on Cisco ASA via ASDM and needs to ensure that rogue NTP servers cannot insert themselves as the authoritative time source Which two steps must be taken to accomplish this task? (Choose two)

What is a characteristic of Dynamic ARP Inspection?

Question 153 - 350-701 discussion

Report

Which two activities can be done using Cisco DNA Center? (Choose two)

A.

DHCP

B.

Design

C.

Accounting

D.

DNS

E.

Provision

Suggested answer: B, E

Explanation:

Cisco DNA Center has four general sections aligned to IT workflows:

Design: Design your network for consistent configurations by device and by site. Physical maps and logical topologies help provide quick visual reference. The direct import feature brings in existing maps, images, and topologies directly from Cisco Prime Infrastructure and the Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM), making upgrades easy and quick. Device configurations by site can be consolidated in a "golden image" that can be used to automatically provision new network devices.

These new devices can either be pre-staged by associating the device details and mapping to a site.

Or they can be claimed upon connection and mapped to the site.

Policy: Translate business intent into network policies and apply those policies, such as access control, traffic routing, and quality of service, consistently over the entire wired and wireless infrastructure. Policy-based access control and network segmentation is a critical function of the Cisco Software-Defined Access (SDAccess) solution built from Cisco DNA Center and Cisco Identity Services Engine (ISE). Cisco AI Network Analytics and Cisco Group-Based Policy

Analytics running in the Cisco DNA Center identify endpoints, group similar endpoints, and determine group communication behavior. Cisco DNA Center then facilitates creating policies that determine the form of communication allowed between and within members of each group. ISE then activates the underlying infrastructure and segments the network creating a virtual overlay to follow these policies consistently. Such segmenting implements zero-trust security in the workplace, reduces risk, contains threats, and helps verify regulatory compliance by giving endpoints just the right level of access they need.

Provision: Once you have created policies in Cisco DNA Center, provisioning is a simple drag-anddrop task.

The profiles (called scalable group tags or "SGTs") in the Cisco DNA Center inventory list are assigned a policy, and this policy will always follow the identity. The process is completely automated and zero-touch. New devices added to the network are assigned to an SGT based on identity—greatly facilitating remote office setups.

Assurance: Cisco DNA Assurance, using AI/ML, enables every point on the network to become a sensor, sending continuous streaming telemetry on application performance and user connectivity in real time. The clean and simple dashboard shows detailed network health and flags issues. Then, guided remediation automates resolution to keep your network performing at its optimal with less mundane troubleshooting work.

The outcome is a consistent experience and proactive optimization of your network, with less time spent on troubleshooting tasks.

Reference: https://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/dnacenter/nb-06- dna-center-so-cte-en.html

Show Answer

asked 10/10/2024

sangilipandy Arumugam

24 questions

User

Your answer: A B C D E

0 comments

Sorted by

Leave a comment first