Grab latest Cisco 350-701 Dumps as PDF Updated on 2024
Newly Released 350-701 Dumps for CCNP Security Certified
The Cisco 350-701 exam covers a wide range of topics, including network security, cloud security, content security, endpoint protection and detection, secure network access, visibility, and enforcement. The Cisco 350-701 exam is a comprehensive assessment that ensures that candidates are well-equipped to manage and protect enterprise networks. It also validates the candidate's ability to implement and operate security solutions that work in harmony with other technologies to provide a comprehensive security posture.
Exam Details
The Cisco 350-701 test has the allocated duration of 120 minutes. The vendor doesn’t publish the exact number of questions and their formats prior to the exam date. However, according to the experience of the former test takers, the exam contains from 90 to 110 questions. The test is delivered in Japanese and English. The candidates can choose to sit for the exam in person at one of the authorized testing centers or take it via online proctoring. Each student is required to pay the registration fee of $400 to schedule the exam. This applies to a single delivery of the test. In case if one fails the first attempt, he or she will have to wait for 5 calendar days and pay another fee before retaking the exam.
NEW QUESTION # 366
In which two ways does Easy Connect help control network access when used with Cisco TrustSec? (Choose two)
- A. It creates a dashboard in Cisco ISE that provides full visibility of all connected endpoints.
- B. It allows for managed endpoints that authenticate to AD to be mapped to Security Groups (PassiveID).
- C. It allows for the assignment of Security Group Tags and does not require 802.1x to be configured on the switch or the endpoint.
- D. It allows multiple security products to share information and work together to enhance security posture in the network.
- E. It integrates with third-party products to provide better visibility throughout the network.
Answer: B,C
Explanation:
Reference:
https://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise-networks/trustsec/trustsec-witheasy-connect-c
NEW QUESTION # 367
Which protocol provides the strongest throughput performance when using Cisco AnyConnect VPN?
- A. DTLSv1
- B. TLSv1.2
- C. BJTLSv1
- D. TLSv1.1
Answer: A
Explanation:
ExplanationDTLS is used for delay sensitive applications (voice and video) as its UDP based while TLS is TCP based.Therefore DTLS offers strongest throughput performance. The throughput of DTLS at the time of AnyConnect connection can be expected to have processing performance close to VPN throughput.
NEW QUESTION # 368
An engineer is trying to securely connect to a router and wants to prevent insecure algorithms from being used.
However, the connection is failing. Which action should be taken to accomplish this goal?
- A. Configure the port using the ip ssh port 22 command.
- B. Enable the SSH server using the ip ssh server command.
- C. Disable telnet using the no ip telnet command.
- D. Generate the RSA key using the crypto key generate rsa command.
Answer: D
Explanation:
ExplanationExplanationIn this question, the engineer was trying to secure the connection so maybe he was trying to allow SSH to the device. But maybe something went wrong so the connection was failing (the connection used to be good). So maybe he was missing the "crypto key generate rsa" command.
NEW QUESTION # 369
Which attack is preventable by Cisco ESA but not by the Cisco WSA?
- A. phishing
- B. buffer overflow
- C. DoS
- D. SQL injection
Answer: A
Explanation:
The following are the benefits of deploying Cisco Advanced Phishing Protection on the Cisco Email Security Gateway: Prevents the following: + Attacks that use compromised accounts and social engineering. + Phishing, ransomware, zero-day attacks and spoofing. + BEC with no malicious payload or URL. Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa13-5/user_guide/b_ESA_Admin_Guide_13- 5/m_advanced_phishing_protection.html Gateway:
Prevents the following:
+ Attacks that use compromised accounts and social engineering.
+ Phishing, ransomware, zero-day attacks and spoofing.
+ BEC with no malicious payload or URL.
Reference:
The following are the benefits of deploying Cisco Advanced Phishing Protection on the Cisco Email Security Gateway: Prevents the following: + Attacks that use compromised accounts and social engineering. + Phishing, ransomware, zero-day attacks and spoofing. + BEC with no malicious payload or URL. Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa13-5/user_guide/b_ESA_Admin_Guide_13- 5/m_advanced_phishing_protection.html
NEW QUESTION # 370
What is the primary difference between an Endpoint Protection Platform and an Endpoint Detection and Response?
- A. EPP focuses on network security, and EDR focuses on device security.
- B. EDR focuses on prevention, and EPP focuses on advanced threats that evade perimeter defenses.
- C. EPP focuses on prevention, and EDR focuses on advanced threats that evade perimeter defenses.
- D. EDR focuses on network security, and EPP focuses on device security.
Answer: C
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/products/security/endpoint-security/what-is-endpoint-detection- response-edr.html
NEW QUESTION # 371
Why is it important for the organization to have an endpoint patching strategy?
- A. so the internal PSIRT organization is aware of the latest bugs
- B. so the latest security fixes are installed on the endpoints
- C. so the network administrator is notified when an existing bug is encountered
- D. so the organization can identify endpoint vulnerabilities
Answer: B
NEW QUESTION # 372
A network administrator is using the Cisco ESA with AMP to upload files to the cloud for analysis. The network is congested and is affecting communication. How will the Cisco ESA handle any files which need analysis?
- A. The file upload is abandoned.
- B. The file is queued for upload when connectivity is restored.
- C. The ESA immediately makes another attempt to upload the file.
- D. AMP calculates the SHA-256 fingerprint, caches it, and periodically attempts the upload.
Answer: D
Explanation:
Reference:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118796-technote-esa-00.html
NEW QUESTION # 373
Refer to the exhibit.
An engineer is implementing a certificate based VPN. What is the result of the existing configuration?
- A. The OU of the IKEv2 peer certificate is encrypted when the OU is set to MANGLER
- B. Only an IKEv2 peer that has an OU certificate attribute set to MANGLER establishes an IKEv2 SA successfully
- C. The OU of the IKEv2 peer certificate is set to MANGLER
- D. The OU of the IKEv2 peer certificate is used as the identity when matching an IKEv2 authorization policy.
Answer: D
NEW QUESTION # 374
An email administrator is setting up a new Cisco ESA. The administrator wants to enable the blocking of greymail for the end user. Which feature must the administrator enable first?
- A. IP Reputation Filtering
- B. Intelligent Multi-Scan
- C. Anti-Virus Filtering
- D. File Analysis
Answer: B
Explanation:
Intelligent Multi-Scan (IMS) is a feature that enables the Cisco ESA to perform multiple anti-spam scans on each message and apply different actions based on the results. IMS also includes the Graymail Detection and Safe Unsubscribe services, which allow the ESA to identify and filter messages that are not strictly spam, but are low-priority or unwanted by the end user, such as newsletters, social media notifications, or marketing emails. The Graymail Detection service can classify messages into different categories, such as bulk, mass, or subscription, and assign different scores and verdicts to them. The Safe Unsubscribe service can provide a link for the end user to safely unsubscribe from the sender's mailing list, without revealing their email address or opening a malicious URL. To enable the blocking of greymail for the end user, the administrator must first enable the IMS feature globally and then configure the Graymail and Safe Unsubscribe settings in the mail policies. The administrator can also enable the centralized spam quarantine and the end-user quarantine interface to allow the end user to manage their own quarantined messages. References :=
* Best Practice Guide for Anti-Spam, Anti-Virus, Graymail and Outbreak Filters
* Graymail Detection and Safe Unsubscribing Functionality
NEW QUESTION # 375
Which technology provides the benefit of Layer 3 through Layer 7 innovative deep packet inspection, enabling the platform to identify and output various applications within the network traffic flows?
- A. Cisco ASAV
- B. Cisco NBAR2
- C. Cisco Prime Infrastructure
- D. Account on Resolution
Answer: B
Explanation:
Cisco NBAR2 is a classification engine that recognizes and classifies a wide variety of protocols and applications based on their deep packet inspection (DPI) signatures. NBAR2 enables the platform to identify and output various applications within the network traffic flows, such as web, email, voice, video, and so on.
NBAR2 also supports custom protocols and applications, allowing the platform to classify traffic based on user-defined criteria. NBAR2 helps the platform to apply the appropriate quality of service (QoS), security, and policy for each application or protocol. References := Some possible references are:
* Cisco NBAR2
* Classifying Network Traffic Using NBAR
* Next Generation NBAR (NBAR2)
NEW QUESTION # 376
An organization is selecting a cloud architecture and does not want to be responsible for patch management of the operating systems. Why should the organization select either Platform as a Service or Infrastructure as a Service for this environment?
- A. Infrastructure as a Service because the service provider manages the operating system
- B. Infrastructure as a Service because the customer manages the operating system
- C. Platform as a Service because the service provider manages the operating system
- D. Platform as a Service because the customer manages the operating system
Answer: B
NEW QUESTION # 377
Refer to the exhibit.
Refer to the exhibit. A Cisco ISE administrator adds a new switch to an 802.1X deployment and has difficulty with some endpoints gaining access.
Most PCs and IP phones can connect and authenticate using their machine certificate credentials. However printer and video cameras cannot base d on the interface configuration provided, what must be to get these devices on to the network using Cisco ISE for authentication and authorization while maintaining security controls?
- A. Change the default policy in Cisco ISE to allow all devices not using machine authentication .
- B. Enable insecure protocols within Cisco ISE in the allowed protocols configuration.
- C. Add mab to the interface configuration.
- D. Configure authentication event fail retry 2 action authorize vlan 41 on the interface
Answer: C
Explanation:
the interface configuration. MAB stands for MAC Authentication Bypass, which is a feature that allows devices that do not support 802.1X, such as printers and video cameras, to bypass the authentication process and gain network access based on their MAC addresses1. By adding mab to the interface configuration, the Cisco ISE administrator can enable MAB as a fallback method after 802.1X fails or times out. This way, the devices that support 802.1X can use their machine certificate credentials, while the devices that do not support
802.1X can use their MAC addresses to authenticate with Cisco ISE2. The other options are not correct because they either compromise the security controls or do not address the problem. Changing the default policy in Cisco ISE to allow all devices not using machine authentication would weaken the security posture and expose the network to unauthorized access. Enabling insecure protocols within Cisco ISE in the allowed protocols configuration would also reduce the security level and increase the risk of attacks. Configuring authentication event fail retry 2 action authorize vlan 41 on the interface would only apply to the devices that fail authentication twice, and would not solve the issue for the devices that do not support 802.1X at all3. References:
* 1: MAC Authentication Bypass Deployment Guide
* 2: Configuring MAC Authentication Bypass
* 3: Cisco Identity Services Engine Administrator Guide, Release 3.1 - Segmentation
NEW QUESTION # 378
I I
An engineer musi set up 200 new laptops on a network and wants to prevent the users from moving their laptops around to simplify administration Which switch port MAC address security setting must be used?
- A. maximum
- B. aging
- C. static
- D. sticky
Answer: D
NEW QUESTION # 379
What is an attribute of the DevSecOps process?
- A. security scanning and theoretical vulnerabilities
- B. development security
- C. mandated security controls and check lists
- D. isolated security team
Answer: C
NEW QUESTION # 380
An organization is implementing URL blocking using Cisco Umbrella. The users are able to go to some sites but other sites are not accessible due to an error. Why is the error occurring?
- A. IP-Layer Enforcement is not configured.
- B. Intelligent proxy and SSL decryption is disabled in the policy
- C. Client computers do not have the Cisco Umbrella Root CA certificate installed.
- D. Client computers do not have an SSL certificate deployed from an internal CA server.
Answer: C
Explanation:
Reference: https://docs.umbrella.com/deployment-umbrella/docs/rebrand-cisco-certificate-import-information
NEW QUESTION # 381
Refer to the exhibit.
What will happen when the Python script is executed?
- A. The script will pull all computer hostnames and print them.
- B. The hostname will be translated to an IP address and printed.
- C. The script will translate the IP address to FODN and print it
- D. The hostname will be printed for the client in the client ID field.
Answer: A
NEW QUESTION # 382
What is a difference between FlexVPN and DMVPN?
- A. DMVPN uses only IKEvI FlexVPN uses only IKEv2.
- B. FlexVPN uses IKEvI or IKEv2. DMVPN uses only IKEv2
- C. FlexVPN uses IKEv2. DMVPN uses IKEvI or IKEv2.
- D. DMVPN uses IKEvI or IKEv2. FlexVPN only uses IKEvI
Answer: C
NEW QUESTION # 383
In which form of attack is alternate encoding, such as hexadecimal representation, most often observed?
- A. cross-site scripting
- B. distributed denial of service
- C. Smurf
- D. rootkit exploit
Answer: A
Explanation:
Explanation
Cross site scripting (also known as XSS) occurs when a web application gathers malicious data from a user. The data is usually gathered in the form of a hyperlink which contains malicious content within it. The user will most likely click on this link from another website, instant message, or simply just reading a web board or email message.
Usually the attacker will encode the malicious portion of the link to the site in HEX (or other encoding methods) so the request is less suspicious looking to the user when clicked on.
For example the code below is written in hex: <a
href=javascript:alert&#
x28'XSS')>Click Here</a>
is equivalent to:
<a href=javascript:alert('XSS')>Click Here</a>
Note: In the format "&#xhhhh", hhhh is the code point in hexadecimal form.
NEW QUESTION # 384
Drag and drop the descriptions from the left onto the correct protocol versions on the right.
Answer:
Explanation:
NEW QUESTION # 385
Which DevSecOps implementation process gives a weekly or daily update instead of monthly or quarterly in the applications?
- A. Orchestration
- B. CI/CD pipeline
- C. Security
- D. Container
Answer: B
Explanation:
Unlike the traditional software life cycle, the CI/CD implementation process gives a weekly or daily update instead of monthly or quarterly. The fun part is customers won't even realize the update is in their applications, as they happen on the fly.
NEW QUESTION # 386
......
Cisco 350-701 certification exam is designed for professionals who intend to implement and operate Cisco security core technologies. 350-701 exam validates the knowledge and skills required to secure networks, devices, applications, and endpoints. The Cisco 350-701 exam is one of the most in-demand certification exams in the IT industry today.
Latest 350-701 Exam Dumps Cisco Exam from Training: https://pass4sure.examcost.com/350-701-practice-exam.html
