لا تريد أن تفوت شيئا؟

نصائح اجتياز امتحان الشهادة

آخر أخبار الامتحانات ومعلومات الخصم

برعاية وحديثة من قبل خبرائنا

نعم، أرسل لي النشرة الإخبارية

خذ اختبارات أخرى عبر الإنترنت
السؤال #1
Which two deployment model configurations are supported for Cisco FTDv in AWS? (Choose two)
A. Cisco FTDv configured in routed mode and managed by an FMCv installed in AWS
B. Cisco FTDv with one management interface and two traffic interfaces configured
C. Cisco FTDv configured in routed mode and managed by a physical FMC appliance on premises
D. Cisco FTDv with two management interfaces and one traffic interface configured
E. Cisco FTDv configured in routed mode and IPv6 configured
عرض الإجابة
اجابة صحيحة: AC

View The Updated 350-701 Exam Questions

SPOTO Provides 100% Real 350-701 Exam Questions for You to Pass Your 350-701 Exam!

Contact Us Get 350-701 Practice Test
السؤال #2
Which security solution is used for posture assessment of the endpoints in a BYOD solution?
A. Cisco FTD
B. Cisco ASA
C. Cisco Umbrella
D. Cisco ISE
عرض الإجابة
اجابة صحيحة: D
السؤال #3
An engineer is adding a Cisco DUO solution to the current TACACS+ deployment using Cisco ISE. The engineer wants to authenticate users using their account when they log into network devices. Which action accomplishes this task?
A. onfigure Cisco DUO with the external Active Directory connector and tie it to the policy set within Cisco ISE
B. odify the current policy with the condition MFASourceSequence DUO=true in the authorization conditions within Cisco ISE
C. reate an identity policy within Cisco ISE to send all authentication requests to Cisco DUO
D. nstall and configure the Cisco DUO Authentication Proxy and configure the identity source sequence within Cisco ISE
عرض الإجابة
اجابة صحيحة: D
السؤال #4
[Content Security]An organization has a Cisco ESA set up with policies and would like to customize the action assigned forviolations. The organization wants a copy of the message to be delivered with a message added to flag it as aDLP violation. Which actions must be performed in order to provide this capability?
A. deliver and send copies to other recipients
B. quarantine and send a DLP violation notification
C. quarantine and alter the subject header with a DLP violation
D. deliver and add disclaimer text
E. Reveal Answer
عرض الإجابة
اجابة صحيحة: D
السؤال #5
On Cisco Firepower Management Center, which policy is used to collect health modules alerts from managed devices?
A. health policy
B. system policy
C. correlation policy
D. access control policy
E. health awareness policy
عرض الإجابة
اجابة صحيحة: A
السؤال #6
A mall provides security services to customers with a shared appliance. The mall wants separation of management on the shared appliance.Which ASA deployment mode meets these needs?
A. routed mode
B. transparent mode
C. multiple context mode
D. multiple zone mode
عرض الإجابة
اجابة صحيحة: C
السؤال #7
Which cloud service model offers an environment for cloud consumers to develop and deploy applications without needing to manage or maintain the underlying cloud infrastructure?
A. PaaS
B. XaaS
C. IaaS
D. SaaS
عرض الإجابة
اجابة صحيحة: A
السؤال #8
What is the advantage of a Dynamic Multipoint VPN over an IPsec VPN?
A. ynamic Multipoint VPN provides full mesh connectivity, and an IPsec VPN offers secure mobile connectivity
B. ynamic Multipoint VPN offers secure mobile connectivity, and an IPsec VPN secures private internet communications
C. ynamic Multipoint VPN offers secure communication between endpoints, and an IPsec VPN secures private internet communications
D. ynamic Multipoint VPN supports IP multicast traffic, and an IPsec VPN supports IP unicast traffic
عرض الإجابة
اجابة صحيحة: A
السؤال #9
Which attack is commonly associated with C and C++ programming languages?
A. cross-site scripting
B. water holing
C. DDoS
D. buffer overflow
عرض الإجابة
اجابة صحيحة: D
السؤال #10
Which information is required when adding a device to Firepower Management Center?
A. username and password
B. encryption method
C. device serial number
D. registration key
عرض الإجابة
اجابة صحيحة: D
السؤال #11
Which API is used for Content Security?
A. NX-OS API
B. IOS XR API
C. OpenVuln API
D. AsyncOS API
عرض الإجابة
اجابة صحيحة: D
السؤال #12
Which two are valid suppression types on a Cisco Next Generation Intrusion Prevention System? (Choose two)
A. Port
B. Rule
C. Source
D. Application
E. Protocol
عرض الإجابة
اجابة صحيحة: BC
السؤال #13
[Security Concepts]Which two capabilities does TAXII support? (Choose two)
A. xchange
B. ull messaging
C. inding
D. orrelation
E. itigating
عرض الإجابة
اجابة صحيحة: AB
السؤال #14
Which CLI command is used to register a Cisco FirePower sensor to Firepower Management Center?
A. configure system add
B. configure manager add host
C. configure manager delete
D. configure manager add
عرض الإجابة
اجابة صحيحة: D
السؤال #15
[Security Concepts]Which Cisco security solution integrates with cloud applications like Dropbox and Office 365 while protecting data from being exfiltrated?
A. Cisco Tajos
B. Cisco Steaithwatch Cloud
C. Cisco Cloudlock
D. Cisco Umbrella Investigate
عرض الإجابة
اجابة صحيحة: C
السؤال #16
When network telemetry is implemented, what is important to be enabled across all network infrastructure devices to correlate different sources?
A. CDP
B. syslog
C. NTP
D. DNS
عرض الإجابة
اجابة صحيحة: C
السؤال #17
What is a commonality between DMVPN and FlexVPN technologies?
A. FlexVPN and DMVPN use IS-IS routing protocol to communicate with spokes
B. FlexVPN and DMVPN use the new key management protocol
C. FlexVPN and DMVPN use the same hashing algorithms
D. IOS routers run the same NHRP code for DMVPN and FlexVPN
عرض الإجابة
اجابة صحيحة: D
السؤال #18
Refer to the exhibit.What does the API do when connected to a Cisco security appliance?
A. get the process and PID information from the computers in the network
B. create an SNMP pull mechanism for managing AMP
C. gather network telemetry information from AMP for endpoints
D. gather the network interface information about the computers AMP sees
عرض الإجابة
اجابة صحيحة: D
السؤال #19
What is the difference between deceptive phishing and spear phishing?
A. Deceptive phishing is an attacked aimed at a specific user in the organization who holds a C-level role
B. A spear phishing campaign is aimed at a specific person versus a group of people
C. Spear phishing is when the attack is aimed at the C-level executives of an organization
D. Deceptive phishing hijacks and manipulates the DNS server of the victim and redirects the user to a false webpage
عرض الإجابة
اجابة صحيحة: B
السؤال #20
An administrator wants to ensure that all endpoints are compliant before users are allowed access on the corporate network. The endpoints must have the corporate antivirus application installed and be running the latest build of Windows 10.What must the administrator implement to ensure that all devices are compliant before they are allowed on the network?
A. Cisco Identity Services Engine and AnyConnect Posture module
B. Cisco Stealthwatch and Cisco Identity Services Engine integration
C. Cisco ASA firewall with Dynamic Access Policies configured
D. Cisco Identity Services Engine with PxGrid services enabled
عرض الإجابة
اجابة صحيحة: A
السؤال #21
How is DNS tunneling used to exfiltrate data out of a corporate network?
A. It leverages the DNS server by permitting recursive lookups to spread the attack to other DNS servers
B. lt encodes the payload with random characters that are broken into short strings and the DNS server rebuilds the exfiltrated data
C. It redirects DNS requests to a malicious server used to steal user credentials, which allows further damage and theft on the network
D. It corrupts DNS servers by replacing the actual IP address with a rogue address to collect information or start other attacks
عرض الإجابة
اجابة صحيحة: B
السؤال #22
The main function of northbound APIs in the SDN architecture is to enable communication between which two areas of a network?
A. SDN controller and the cloud
B. management console and the SDN controller
C. management console and the cloud
D. SDN controller and the management solution
عرض الإجابة
اجابة صحيحة: D
السؤال #23
Which two prevention techniques are used to mitigate SQL injection attacks? (Choose two)
A. Check integer, float, or Boolean string parameters to ensure accurate values
B. Use prepared statements and parameterized queries
C. Secure the connection between the web and the app tier
D. Write SQL code instead of using object-relational mapping libraries
E. Block SQL code execution in the web application database login
عرض الإجابة
اجابة صحيحة: AB
السؤال #24
Which feature requires a network discovery policy on the Cisco Firepower Next Generation Intrusion PreventionSystem?
A. Security Intelligence
B. Impact Flags
C. Health Monitoring
D. URL Filtering
عرض الإجابة
اجابة صحيحة: B
السؤال #25
Which two tasks allow NetFlow on a Cisco ASA 5500 Series firewall? (Choose two)
A. Enable NetFlow Version 9
B. Create an ACL to allow UDP traffic on port 9996
C. Apply NetFlow Exporter to the outside interface in the inbound direction
D. Create a class map to match interesting traffic
E. Define a NetFlow collector by using the flow-export command
عرض الإجابة
اجابة صحيحة: CE
السؤال #26
Which Cisco ASA deployment model is used to filter traffic between hosts in the same IP subnet using higher-level protocols without readdressing the network?
A. ingle context mode
B. outed mode
C. ultiple context mode
D. ransparent mode
عرض الإجابة
اجابة صحيحة: D
السؤال #27
Which two request methods of REST API are valid on the Cisco ASA Platform? (Choose two.)
A. put
B. options
C. get
D. push
E. connect
عرض الإجابة
اجابة صحيحة: AC
السؤال #28
Refer to the exhibit.What is the result of this Python script of the Cisco DNA Center API?
A. adds authentication to a switch
B. adds a switch to Cisco DNA Center
C. receives information about a switch
D. deletes a switch from Cisco DNA Center
عرض الإجابة
اجابة صحيحة: B
السؤال #29
An engineer is configuring Outbreak Filters for a Cisco Secure Email Gateway to protect a network from large-scale virus outbreaks and phishing scams. Any URLs that match the filter must be logged with these details:- Category- Reputation score- Outbreak Filter rewritesWhich CLI command must the engineer use?
A. utbreakfilters
B. uarantineconfig
C. lpconfig
D. utbreakconfig
عرض الإجابة
اجابة صحيحة: D
السؤال #30
Which flaw does an attacker leverage when exploiting SQL injection vulnerabilities?
A. ser input validation in a web page or web application
B. inux and Windows operating systems
C. atabase
D. eb page images
عرض الإجابة
اجابة صحيحة: A
السؤال #31
Which statement about IOS zone-based firewalls is true?
A. An unassigned interface can communicate with assigned interfaces
B. Only one interface can be assigned to a zone
C. An interface can be assigned to multiple zones
D. An interface can be assigned only to one zone
عرض الإجابة
اجابة صحيحة: D
السؤال #32
Which Talos reputation center allows you to track the reputation of IP addresses for email and web traffic?
A. IP Blacklist Center
B. File Reputation Center
C. AMP Reputation Center
D. IP and Domain Reputation Center
عرض الإجابة
اجابة صحيحة: D
السؤال #33
In which cloud services model is the tenant responsible for virtual machine OS patching?
A. IaaS
B. UCaaS
C. PaaS
D. SaaS
عرض الإجابة
اجابة صحيحة: A
السؤال #34
In which two ways does a system administrator send web traffic transparently to the Web Security Appliance?(Choose two)
A. configure Active Directory Group Policies to push proxy settings
B. configure policy-based routing on the network infrastructure
C. reference a Proxy Auto Config file
D. configure the proxy IP address in the web-browser settings
E. use Web Cache Communication Protocol
عرض الإجابة
اجابة صحيحة: BE
السؤال #35
Which technology is used to improve web traffic performance by proxy caching?
A. WSA
B. Firepower
C. FireSIGHT
D. ASA
عرض الإجابة
اجابة صحيحة: A
السؤال #36
[Security Concepts]What is the process of performing automated static and dynamic analysis of files against preloadedbehavioral indicators for threat analysis?
A. deep visibility scan
B. point-in-time checks
C. advanced sandboxing
D. advanced scanning
E. Reveal Answer
عرض الإجابة
اجابة صحيحة: C
السؤال #37
Which type of attack is social engineering?
A. trojan
B. phishing
C. malware
D. MITM
عرض الإجابة
اجابة صحيحة: B
السؤال #38
Which form of attack is launched using botnets?
A. CP flood
B. DOS
C. OS
D. irus
عرض الإجابة
اجابة صحيحة: B
السؤال #39
Refer to the exhibit.A network administrator configured a site-to-site VPN tunnel between two Cisco IOS routers, and hosts are unable to communicate between two sites of VPN. The network administrator runs the debug crypto isakmp sa command to track VPN status.What is the problem according to this command output?
A. hashing algorithm mismatch
B. encryption algorithm mismatch
C. authentication key mismatch
D. interesting traffic was not applied
عرض الإجابة
اجابة صحيحة: C
السؤال #40
Which two capabilities does TAXII support? (Choose two)
A. Exchange
B. Pull messaging
C. Binding
D. Correlation
E. Mitigating
عرض الإجابة
اجابة صحيحة: AB
السؤال #41
What is the result of running the crypto isakmp key ciscXXXXXXXX address 172.16.0.0 command?
A. authenticates the IKEv2 peers in the 172
B. authenticates the IP address of the 172
C. authenticates the IKEv1 peers in the 172
D. secures all the certificates in the IKE exchange by using the key ciscXXXXXXXX
عرض الإجابة
اجابة صحيحة: C
السؤال #42
What is a language format designed to exchange threat intelligence that can be transported over the TAXII protocol?
A. STIX
B. XMPP
C. pxGrid
D. SMTP
عرض الإجابة
اجابة صحيحة: A
السؤال #43
What is a feature of the open platform capabilities of Cisco DNA Center?
A. pplication adapters
B. omain integration
C. ntent-based APIs
D. utomation adapters
عرض الإجابة
اجابة صحيحة: C
السؤال #44
Which two deployment modes does the Cisco ASA FirePower module support? (Choose two)
A. transparent mode
B. routed mode
C. inline mode
D. active mode
E. passive monitor-only mode
عرض الإجابة
اجابة صحيحة: CD
السؤال #45
Which option is the main function of Cisco Firepower impact flags?
A. They alert administrators when critical events occur
B. They highlight known and suspected malicious IP addresses in reports
C. They correlate data about intrusions and vulnerability
D. They identify data that the ASA sends to the Firepower module
عرض الإجابة
اجابة صحيحة: C
السؤال #46
What is a characteristic of Cisco ASA Netflow v9 Secure Event Logging?
A. It tracks flow-create, flow-teardown, and flow-denied events
B. It provides stateless IP flow tracking that exports all records of a specific flow
C. It tracks the flow continuously and provides updates every 10 seconds
D. Its events match all traffic classes in parallel
عرض الإجابة
اجابة صحيحة: A
السؤال #47
An administrator is configuring a DHCP server to better secure their environment. They need to be able to rate - limit the traffic and ensure that legitimate requests are not dropped. How would this be accomplished?
A. Set a trusted interface for the DHCP server
B. Set the DHCP snooping bit to 1
C. Add entries in the DHCP snooping database
D. Enable ARP inspection for the required VLAN
عرض الإجابة
اجابة صحيحة: A
السؤال #48
What is the difference between deceptive phishing and spear phishing?
A. Deceptive phishing is an attacked aimed at a specific user in the organization who holds a C-level role
B. A spear phishing campaign is aimed at a specific person versus a group of people
C. Spear phishing is when the attack is aimed at the C-level executives of an organization
D. Deceptive phishing hijacks and manipulates the DNS server of the victim and redirects the user to a false webpage
عرض الإجابة
اجابة صحيحة: B
السؤال #49
Which solution protects hybrid cloud deployment workloads with application visibility and segmentation?
A. Nexus
B. Stealthwatch
C. Firepower
D. Tetration
عرض الإجابة
اجابة صحيحة: D
السؤال #50
The main function of northbound APIs in the SDN architecture is to enable communication between which two areas of a network?
A. DN controller and the cloud
B. anagement console and the SDN controller
C. anagement console and the cloud
D. DN controller and the management solution
عرض الإجابة
اجابة صحيحة: D
السؤال #51
[Security Concepts]Refer to the exhibit. When creating an access rule for URL filtering, a network engineer adds certain categories and individual URLs to block. What is the result of the configuration?
A. Only URLs for botnets with reputation scores of 1-3 will be blocked
B. Only URLs for botnets with a reputation score of 3 will be blocked
C. Only URLs for botnets with reputation scores of 3-5 will be blocked
D. Only URLs for botnets with a reputation score of 3 will be allowed while the rest will be blocked
E. Reveal Answer
عرض الإجابة
اجابة صحيحة: B

عرض الإجابات بعد التقديم

يرجى إرسال البريد الإلكتروني الخاص بك والواتس اب للحصول على إجابات الأسئلة.

ملحوظة: يرجى التأكد من صلاحية معرف البريد الإلكتروني وWhatsApp حتى تتمكن من الحصول على نتائج الاختبار الصحيحة.

بريد إلكتروني:
رقم الواتس اب/الهاتف:
Contact Us


Copyright © 2024. Designer by SPOTO Official Website. All Rights Reserved.