350-701 Exam Training Practice Tests (Cisco Implementing and Operating Cisco Security Core Technologies)]

Question 1

With regard to RFC 5176 compliance, how many IETF attributes are supported by the RADIUS CoA feature?

A. 12 B. 10 C. 5 D. 3

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 2

Which two functions does the Cisco Advanced Phishing Protection solution perform in trying to protect from phishing attacks? (Choose two.)

A. determines if the email messages are malicious B. does a real-time user web browsing behavior analysis C. provides a defense for on-premises email deployments D. blocks malicious websites and adds them to a block list E. uses a static algorithm to determine malicious

Correct Answer: A,B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 3

Which Cisco ISE feature helps to detect missing patches and helps with remediation?

A. enabling probes B. authentication policy C. posture assessment D. profiling policy

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 4

What is a benefit of using telemetry over SNMP to configure new routers for monitoring purposes?

A. Telemetry uses push and pull which makes it more secure than SNMP B. Telemetry uses a pull mehod, which makes it more reliable than SNMP C. Telemetry uses push and pull, which makes it more scalable than SNMP D. Telemetry uses a push method which makes it faster than SNMP

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 5

Which function is performed by certificate authorities but is a limitation of registration authorities?

A. verifying user identity B. certificate re-enrollment C. CRL publishing D. accepts enrollment requests

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 6

Which category includes DoS Attacks?

A. Flood attacks B. Phishing attacks C. Trojan attacks D. Virus attacks

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 7

Refer to the exhibit.

What are two indications of the Cisco Firepower Services Module configuration?
(Choose two.)

A. Traffic is blocked if the module fails. B. The module fails to receive redirected traffic. C. The module is operating in IDS mode. D. The module is operating in IPS mode. E. Traffic continues to flow if the module fails.

Correct Answer: C,E

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 8

How does Cisco Umbrella archive logs to an enterprise owned storage?

A. by using the Application Programming Interface to fetch the logs B. by sending logs via syslog to an on-premises or cloud-based syslog server C. by the system administrator downloading the logs from the Cisco Umbrella web portal D. by being configured to send logs to a self-managed AWS S3 bucket

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 9

Which form of attack is launched using botnets?

A. TCP flood B. EIDDOS C. DDOS D. virus

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 10

What are two Trojan malware attacks? (Choose two)

A. Rootkit B. Smurf C. Sync D. Backdoor E. Frontdoor

Correct Answer: A,D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 11

What are two features of NetFlow flow monitoring? (Choose two)

A. Can be used to track multicast, MPLS, or bridged traffic B. Can track ingress and egress information C. Does not required packet sampling on interfaces D. Copies all ingress flow information to an interface E. Include the flow record and the flow importer

Correct Answer: A,B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 12

A network engineer must monitor user and device behavior within the on-premises network. This data must be sent to the Cisco Stealthwatch Cloud analytics platform for analysis. What must be done to meet this requirement using the Ubuntu-based VM appliance deployed in a VMware-based hypervisor?

A. Deploy a Cisco FTD sensor to send network events to Cisco Stealthwatch Cloud B. Configure a Cisco FMC to send NetFlow to Cisco Stealthwatch Cloud C. Deploy the Cisco Stealthwatch Cloud PNM sensor that sends data to Cisco Stealthwatch Cloud D. Configure a Cisco FMC to send syslogs to Cisco Stealthwatch Cloud

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 13

Why is it important to have logical security controls on endpoints even though the users are trained to spot security threats and the network devices already help prevent them?

A. because defense-in-depth stops at the network B. to prevent theft of the endpoints C. to expose the endpoint to more threats D. because human error or insider threats will still exist

Correct Answer: D

Question 14

What are two differences between a Cisco Secure Web Appliance that is running in transparent mode and one running in explicit mode? (Choose two.)

A. The Cisco Secure Web Appliance uses a Layer 3 device to redirect traffic only if it is running in transparent mode. B. The Cisco Secure Web Appliance is configured in a web browser only if it is running in transparent mode. C. The Cisco Secure Web Appliance responds with its own IP address only if it is running in explicit mode. D. The Cisco Secure Web Appliance responds with its own IP address only if it is running in transparent mode. E. When the Cisco Secure Web Appliance is running in transparent mode, it uses the Secure Web Appliance ' s own IP address as the HTTP request destination.

Correct Answer: A,C

Cisco Implementing and Operating Cisco Security Core Technologies - 350-701 Exam Practice Test