DON'T WANT TO MISS A THING?

Certification Exam Passing Tips

Latest exam news and discount info

Curated and up-to-date by our experts

Yes, send me the newsletter

Free Cisco 350-701 SCOR Practice Questions 2026 Part3 | Cisco Security Core

Are you preparing for the Cisco 350-701 certification exam? SPOTO offers the Cisco 350-701 Premium File; all questions are aligned with the latest exam content and come with expert-provided answers. Our question banks cover the latest question types, core concepts, and detailed explanations, helping you familiarize yourself with the exam format and difficulty level. Whether you are reviewing core concepts or simulating a real exam environment, these resources will rapidly boost your confidence and readiness.
For over two decades, SPOTO has successfully helped numerous IT professionals secure their ideal positions at Fortune 500 companies. Download now to start practicing efficiently and ensure a high score on the actual exam. Don't miss this opportunity to pass your certification exam with ease!
Take other online exams
Question #1
Which functions of an SDN architecture require southbound APIs to enable communication?
A. SDN controller and the network elements
B. management console and the SDN controller
C. management console and the cloud
D. SDN controller and the cloud
View answer
Correct Answer: A

View The Updated 350-701 Exam Questions

SPOTO Provides 100% Real 350-701 Exam Questions for You to Pass Your 350-701 Exam!

Contact Us Get 350-701 Practice Test
Question #2
Which flaw does an attacker leverage when exploiting SQL injection vulnerabilities?
A. user input validation in a web page or web application
B. Linux and Windows operating systems
C. database
D. web page images
View answer
Correct Answer: A
Question #3
[Secure Network Access, Visibility, and Enforcement]Which CoA response code is sent if an authorization state is changed successfully on a Cisco IOS device?
A. CoA-NCL
B. CoA-NAK
C. -
D. CoA-ACK
E. Reveal Answer
View answer
Correct Answer: D
Question #4
Elliptic curve cryptography is a stronger more efficient cryptography method meant to replace which current encryption technology?
A. 3DES
B. RSA
C. DES
D. AES
View answer
Correct Answer: B
Question #5
[Secure Network Access, Visibility, and Enforcement] Why should organizations migrate to a multifactor authentication strategy?
A. AMultifactor authentication methods of authentication are never compromised
B. BBiometrics authentication leads to the need for multifactor authentication due to its ability to be hacked easily
C. CMultifactor authentication does not require any piece of evidence for an authentication mechanism
D. DSingle methods of authentication can be compromised more easily than multifactor authentication
View answer
Correct Answer: D
Question #6
Which license is required for Cisco Security Intelligence to work on the Cisco Next Generation IntrusionPrevention System?
A. control
B. malware
C. URL filtering
D. protect
View answer
Correct Answer: D
Question #7
A network engineer is configuring DMVPN and entered the crypto isakmp key cisc0380739941 address 0.0.0.0 command on host
A. The tunnel is not being established to hostB
B. Change isakmp to ikev2 in the command on hostA
C. Enter the command with a different password on hostB
D. Enter the same command on hostB
E. Change the password on hostA to the default password
View answer
Correct Answer: C
Question #8
Refer to the exhibit. What is the result of this Python script of the Cisco DNA Center API?
A. dds authentication to a switch
B. dds a switch to Cisco DNA Center
C. eletes a switch from Cisco DNA Center
D. eceives information about a switch
View answer
Correct Answer: B
Question #9
Which functions of an SDN architecture require southbound APIs to enable communication?
A. DN controller and the network elements
B. anagement console and the SDN controller
C. anagement console and the cloud
D. DN controller and the cloud
View answer
Correct Answer: A
Question #10
In which form of attack is alternate encoding, such as hexadecimal representation, most often observed?
A. murf
B. istributed denial of service
C. ross-site scripting
D. ootkit exploit
View answer
Correct Answer: C
Question #11
Which form of attack is launched using botnets?
A. TCP flood
B. DDOS
C. DOS
D. virus
View answer
Correct Answer: B
Question #12
[Network Security]Which feature of Cisco ASA allows VPN users to be postured against Cisco ISE without requiring an inlineposture node?
A. RADIUS Change of Authorization
B. device tracking
C. DHCP snooping
D. VLAN hopping
E. Reveal Answer
View answer
Correct Answer: A
Question #13
[Security Concepts]What are two rootkit types? (Choose two)
A. egistry
B. irtual
C. ootloader
D. ser mode
E. uffer mode
View answer
Correct Answer: CD
Question #14
When web policies are configured in Cisco Umbrella, what provides the ability to ensure that domains are blocked when they host malware, command and control, phishing, and more threats?
A. Application Control
B. Security Category Blocking
C. Content Category Blocking
D. File Analysis
View answer
Correct Answer: B
Question #15
Which feature is supported when deploying Cisco ASAv within AWS public cloud?
A. multiple context mode
B. user deployment of Layer 3 networks
C. IPv6
D. clustering
View answer
Correct Answer: B
Question #16
Which two behavioral patterns characterize a ping of death attack? (Choose two.)
A. he attack is fragmented into groups of 16 octets before transmission
B. he attack is fragmented into groups of 8 octets before transmission
C. hort synchronized bursts of traffic are used to disrupt TCP connections
D. alformed packets are used to crash systems
E. ublicly accessible DNS servers are typically used to execute the attack
View answer
Correct Answer: BD
Question #17
What is the function of Cisco Cloudlock for data security?
A. data loss prevention
B. controls malicious cloud apps
C. detects anomalies
D. user and entity behavior analytics
View answer
Correct Answer: A
Question #18
Which threat involves software being used to gain unauthorized access to a computer system?
A. virus
B. NTP amplification
C. ping of death
D. HTTP flood
View answer
Correct Answer: A
Question #19
Which two features of Cisco Email Security can protect your organization against email threats? (Choose two)
A. Time-based one-time passwords
B. Data loss prevention
C. Heuristic-based filtering
D. Geolocation-based filtering
E. NetFlow
View answer
Correct Answer: BD
Question #20
A network administrator is modifying a remote access VPN on an FTD managed by an FMC. The administrator wants to offload traffic to certain trusted domains. The administrator wants this traffic to go out of the client's local internet and send other internet-bound traffic over the VPN Which feature must the administrator configure?
A. everse route injection
B. ynamic access policies
C. ynamic split tunneling
D. ocal LAN access
View answer
Correct Answer: C
Question #21
Which two statements about a Cisco WSA configured in Transparent mode are true? (Choose two)
A. It can handle explicit HTTP requests
B. It requires a PAC file for the client web browser
C. It requires a proxy for the client web browser
D. WCCP v2-enabled devices can automatically redirect traffic destined to port 80
E. Layer 4 switches can automatically redirect traffic destined to port 80
View answer
Correct Answer: DE
Question #22
Which algorithm provides encryption and authentication for data plane communication?
A. AES-GCM
B. SHA-96
C. AES-256
D. SHA-384
View answer
Correct Answer: A
Question #23
[Security Concepts]What is a characteristic of Firepower NGIPS inline deployment mode?
A. ASA with Firepower module cannot be deployed
B. It cannot take actions such as blocking traffic
C. It is out-of-band from traffic
D. It must have inline interface pairs configured
View answer
Correct Answer: D
Question #24
An engineer must force an endpoint to re-authenticate an already authenticated session without disrupting the endpoint to apply a new or updated policy from ISE.Which CoA type achieves this goal?
A. Port Bounce
B. CoA Terminate
C. CoA Reauth
D. CoA Session Query
View answer
Correct Answer: C
Question #25
Which VPN technology can support a multivendor environment and secure traffic between sites?
A. SSL VPN
B. GET VPN
C. FlexVPN
D. DMVPN
View answer
Correct Answer: C
Question #26
Which feature is configured for managed devices in the device platform settings of the Firepower ManagementCenter?
A. quality of service
B. time synchronization
C. network address translations
D. intrusion policy
View answer
Correct Answer: B
Question #27
[Security Concepts]Which information is required when adding a device to Firepower Management Center?
A. username and password
B. encryption method
C. device serial number
D. registration key
E. Reveal Answer
View answer
Correct Answer: D
Question #28
[Secure Network Access, Visibility, and Enforcement]Which PKI enrollment method allows the user to separate authentication and enrollment actions andalsoprovides an option to specify HTTP/TFTP commands to perform file retrieval from the server?
A. rl
B. erminal
C. rofile
D. elfsigned
View answer
Correct Answer: C
Question #29
What are two rootkit types? (Choose two)
A. registry
B. virtual
C. bootloader
D. user mode
E. buffer mode
View answer
Correct Answer: CD
Question #30
Which two descriptions of AES encryption are true? (Choose two)
A. AES is less secure than 3DES
B. AES is more secure than 3DES
C. AES can use a 168-bit key for encryption
D. AES can use a 256-bit key for encryption
E. AES encrypts and decrypts a key three times in sequence
View answer
Correct Answer: BD
Question #31
[Security Concepts]Which threat involves software being used to gain unauthorized access to a computer system?
A. irus
B. TP amplification
C. ing of death
D. TTP flood
View answer
Correct Answer: A
Question #32
Which two services must remain as on-premises equipment when a hybrid email solution is deployed? (Choose two)
A. DDoS
B. antispam
C. antivirus
D. encryption
E. DLP
View answer
Correct Answer: DE
Question #33
Which protocol provides the strongest throughput performance when using Cisco AnyConnect VPN?
A. TLSv1
B. TLSv1
C. BJTLSv1
D. DTLSv1
View answer
Correct Answer: D
Question #34
[Security Concepts]Which two key and block sizes are valid for AES? (Choose two)
A. 4-bit block size, 112-bit key length
B. 4-bit block size, 168-bit key length
C. 28-bit block size, 192-bit key length
D. 28-bit block size, 256-bit key length
E. 92-bit block size, 256-bit key length
View answer
Correct Answer: CD
Question #35
What is the purpose of the Cisco Endpoint loC feature?
A. It provides stealth threat prevention
B. lt is a signature-based engine
C. lt is an incident response tool
D. It provides precompromise detection
View answer
Correct Answer: C
Question #36
Which two key and block sizes are valid for AES? (Choose two)
A. 64-bit block size, 112-bit key length
B. 64-bit block size, 168-bit key length
C. 128-bit block size, 192-bit key length
D. 128-bit block size, 256-bit key length
E. 192-bit block size, 256-bit key length
View answer
Correct Answer: CD
Question #37
What are two rootkit types? (Choose two)
A. registry
B. bootloader
C. buffer mode
D. user mode
E. virtual
View answer
Correct Answer: BD
Question #38
Which statement about the configuration of Cisco ASA NetFlow v9 Secure Event Logging is true?
A. To view bandwidth usage for NetFlow records, the QoS feature must be enabled
B. A sysopt command can be used to enable NSEL on a specific interface
C. NSEL can be used without a collector configured
D. A flow-export event type must be defined under a policy
View answer
Correct Answer: D
Question #39
[Secure Network Access, Visibility, and Enforcement]An administrator is adding a new switch onto the network and has configured AAA for network access control. When testing the configuration, the RADIUS authenticates to Cisco ISE but is being rejected. Why is the ip radius source-interface command needed for this configuration?
A. Only requests that originate from a configured NAS IP are accepted by a RADIUS server
B. The RADIUS authentication key is transmitted only from the defined RADIUS source interface
C. RADIUS requests are generated only by a router if a RADIUS source interface is defined
D. Encrypted RADIUS authentication requires the RADIUS source interface be defined
View answer
Correct Answer: A
Question #40
Which two features of Cisco DNA Center are used in a Software Defined Network solution? (Choose two)
A. accounting
B. assurance
C. automation
D. authentication
E. encryption
View answer
Correct Answer: BC
Question #41
How many interfaces per bridge group does an ASA bridge group deployment support?
A. up to 2
B. up to 4
C. up to 8
D. up to 16
View answer
Correct Answer: B
Question #42
An organization wants to secure users, data, and applications in the cloud. The solution must be API-based on operate as a cloud-native CASB. Which solution must be used for this implementation?
A. isco Umbrella
B. isco Cloudlock
C. isco Cloud Email Security
D. isco Firepower Next-Generation Firewall
View answer
Correct Answer: B
Question #43
Which PKI enrollment method allows the user to separate authentication and enrollment actions and also provides an option to specify HTTP/TFTP commands to perform file retrieval from the server?
A. url
B. terminal
C. profile
D. selfsigned
View answer
Correct Answer: C
Question #44
Which technology must be used to implement secure VPN connectivity among company branches over a private IP cloud with any-to-any scalable connectivity?
A. DMVPN
B. FlexVPN
C. IPsec DVTI
D. GET VPN
View answer
Correct Answer: D
Question #45
[Security Concepts]Which solution detects threats across a private network, public clouds, and encrypted traffic?
A. Cisco Stealthwatch
B. Cisco CTA
C. Cisco Encrypted Traffic Analytics
D. Cisco Umbrella
E. Reveal Answer
View answer
Correct Answer: A
Question #46
Which two mechanisms are used to control phishing attacks? (Choose two)
A. Enable browser alerts for fraudulent websites
B. Define security group memberships
C. Revoke expired CRL of the websites
D. Use antispyware software
E. Implement email filtering techniques
View answer
Correct Answer: AE
Question #47
[Endpoint Protection and Detection]Which Cisco ISE feature helps to detect missing patches and helps with remediation?
A. posture assessment
B. profiling policy
C. authentication policy
D. enabling probes
E. Reveal Answer
View answer
Correct Answer: A
Question #48
[Security Concepts]What is a feature of container orchestration?
A. ability to deploy Amazon ECS clusters by using the Cisco Container Platform data plane
B. ability to deploy Amazon EKS clusters by using the Cisco Container Platform data plane
C. ability to deploy Kubernetes clusters in air-gapped sites
D. automated daily updates
View answer
Correct Answer: C
Question #49
The Cisco ASA must support TLS proxy for encrypted Cisco Unified Communications traffic.Where must theASA be added on the Cisco UC Manager platform?
A. Certificate Trust List
B. Endpoint Trust List
C. Enterprise Proxy Service
D. Secured Collaboration Proxy
View answer
Correct Answer: A
Question #50
In which form of attack is alternate encoding, such as hexadecimal representation, most often observed?
A. Smurf
B. distributed denial of service
C. cross-site scripting
D. rootkit exploit
View answer
Correct Answer: C
Question #51
In which form of attack is alternate encoding, such as hexadecimal representation, most often observed?
A. smurf
B. distributed denial of service
C. cross-site scripting
D. rootkit exploit
View answer
Correct Answer: C
Question #52
[Security Concepts]Which type of attack is social engineering?
A. rojan
B. hishing
C. alware
D. ITM
View answer
Correct Answer: B
Question #53
Which two request methods of REST API are valid on the Cisco ASA Platform? (Choose two.)
A. ut
B. ptions
C. et
D. ush
E. onnect
View answer
Correct Answer: AC
Question #54
Which policy is used to capture host information on the Cisco Firepower Next Generation Intrusion PreventionSystem?
A. Correlation
B. Intrusion
C. Access Control
D. Network Discovery
View answer
Correct Answer: D
Question #55
Which encryption algorithm provides highly secure VPN communications?
A. 3DES
B. AES 256
C. AES 128
D. DES
View answer
Correct Answer: B
Question #56
[Security Concepts] An engineer is trying to securely connect to a router and wants to prevent insecure algorithms from being used. However, the connection is failing. Which action should be taken to accomplish this goal?
A. ADisable telnet using the no ip telnet command
B. BEnable the SSH server using the ip ssh server command
C. CConfigure the port using the ip ssh port 22 command
D. DGenerate the RSA key using the crypto key generate rsa command
View answer
Correct Answer: D
Question #57
[Security Concepts]Which two risks is a company vulnerable to if it does not have a well-established patching solutionforendpoints? (Choose two)
A. xploits
B. RP spoofing
C. enial-of-service attacks
D. alware
E. avesdropping
View answer
Correct Answer: AD
Question #58
Which two behavioral patterns characterize a ping of death attack? (Choose two)
A. The attack is fragmented into groups of 16 octets before transmission
B. The attack is fragmented into groups of 8 octets before transmission
C. Short synchronized bursts of traffic are used to disrupt TCP connections
D. Malformed packets are used to crash systems
E. Publicly accessible DNS servers are typically used to execute the attack
View answer
Correct Answer: BD
Question #59
Which technology reduces data loss by identifying sensitive information stored in public computing environments?
A. Cisco SDA
B. Cisco Firepower
C. Cisco HyperFlex
D. Cisco Cloudlock
View answer
Correct Answer: D
Question #60
[Security Concepts]What is a benefit of using Cisco AVC (Application Visibility and Control) for application control?
A. management of application sessions
B. retrospective application analysis
C. zero-trust approach
D. dynamic application scanning
View answer
Correct Answer: D
Question #61
What are two workloaded security models? (Choose two)
A. SaaS
B. IaaS
C. on-premises
D. off-premises
E. PaaS
View answer
Correct Answer: CD
Question #62
What is the difference between deceptive phishing and spear phishing?
A. eceptive phishing is an attacked aimed at a specific user in the organization who holds a C-level role
B. spear phishing campaign is aimed at a specific person versus a group of people
C. pear phishing is when the attack is aimed at the C-level executives of an organization
D. eceptive phishing hijacks and manipulates the DNS server of the victim and redirects the user to a false webpage
View answer
Correct Answer: B
Question #63
On which part of the IT environment does DevSecOps focus?
A. application development
B. wireless network
C. data center
D. perimeter network
View answer
Correct Answer: A
Question #64
Refer to the exhibit. What does the API do when connected to a Cisco security appliance?
A. create an SNMP pull mechanism for managing AMP
B. gather network telemetry information from AMP for endpoints
C. get the process and PID information from the computers in the network
D. gather the network interface information about the computers AMP sees
View answer
Correct Answer: D

View Answers after Submission

Please submit your email and WhatsApp to get the answers of questions.

Note: Please make sure your email ID and Whatsapp are valid so that you can get the correct exam results.

Email:
Whatsapp/phone number:
Contact Us


Copyright © 2024. Designer by SPOTO Official Website. All Rights Reserved.