350-701 Exam Training Practice Tests (Cisco Implementing and Operating Cisco Security Core Technologies)]

Question 1

Which method is used to deploy certificates and configure the supplicant on mobile devices to gain access to network resources?

A. BYOD on boarding B. MAC authentication bypass C. Simple Certificate Enrollment Protocol D. Client provisioning

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 2

Drag and Drop Question
Drag and drop the security solutions from the left onto the benefits they provide on the right.

Correct Answer:

Question 3

A hacker initiated a social engineering attack and stole username and passwords of some users within a company. Which product should be used as a solution to this problem?

A. Cisco Duo B. Cisco AnyConnect C. Cisco NGFW D. Cisco AMP for Endpoints

Correct Answer: A

Question 4

How does Cisco Stealthwatch Cloud provide security for cloud environments?

A. It delivers visibility and threat detection. B. It prevents exfiltration of sensitive datA. C. It facilitates secure connectivity between public and private networks. D. It assigns Internet-based DNS protection for clients and servers.

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 5

What is an advantage of using a next-generation firewall compared to a traditional firewall?

A. Next-generation firewalls have stateless inspection capabilities, and traditional firewalls use stateful inspection. B. Next-generation firewalls have threat intelligence feeds, and traditional firewalls use signature detection. C. Next-generation firewalls use intrusion prevention policies, and traditional firewalls use intrusion detection policies. D. Next-generation firewalls use dynamic packet filtering, and traditional firewalls use static packet filtering.

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 6

Refer to the exhibit. What will happen when this Python script is run?

A. The list of computers and their current vulnerabilities will be received from Cisco AMP B. The compromised computers and malware trajectories will be received from Cisco AMP C. The compromised computers and what compromised them will be received from Cisco AMP D. The list of computers, policies, and connector statuses will be received from Cisco AMP

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 7

Drag and Drop Question
Drag and drop the steps from the left into the correct order on the right to enable AppDynamics to monitor an EC2 instance in Amazon Web Services.

Correct Answer:

Question 8

Refer to the exhibit. An engineer must modify the header priority to match a mail policy on a Cisco Secure Email Gateway. The From header must be set to priority P1, and Envelope Sender must be set to priority P2. Which action must be taken next to complete the configuration?

A. Create a new Mail Flow policies. B. Modify the Incoming Mail Policies default policy. C. Create a new Incoming Mail policy. D. Modify the Mail Policy settings.

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 9

An engineer is configuring Cisco WSA and needs to ensure end clients are protected against DNS spoofing attacks. Which deployment method accomplishes this goal?

A. explicit forward B. Web Cache Communication Protocol C. single-context mode D. transparent mode

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 10

An engineer is configuring a Cisco Secure Email Gateway and wants to control whether to accept or reject email messages to a recipient address.
Which list contains the allowed recipient addresses?

A. SAT B. RAT C. HAT D. BAT

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Cisco Implementing and Operating Cisco Security Core Technologies - 350-701 Exam Practice Test