350-701 Practice Exam Questions and Answers

A.  

It applies the next identification profile policy.

B.  

It applies the advanced policy.

C.  

It applies the global policy.

D.  

It blocks the request.

A.  

posture

B.  

profiler

C.  

Cisco TrustSec

D.  

Threat Centric NAC

A.  

Traffic storm control drops all broadcast and multicast traffic if the combined traffic exceeds the level withinthe interval.

B.  

Traffic storm control cannot determine if the packet is unicast or broadcast.

C.  

Traffic storm control monitors incoming traffic levels over a 10-second traffic storm control interval.

D.  

Traffic storm control uses the Individual/Group bit in the packet source address to determine if the packet isunicast or broadcast.

A.  

Tracked application security

B.  

Automated patching

C.  

Reduced attack surface

D.  

Scalable security policies

E.  

Workload modeling

A.  

reputation filtering

B.  

data obfuscation

C.  

data encryption

D.  

deep packet inspection

A.  

It provides compliance checks for access to the network

B.  

It provides the ability to update other applications on the mobile device

C.  

It provides the ability to add applications to the mobile device through Cisco ISE

D.  

It provides network device administration access

A.  

24 State

B.  

30 Calling-Station-ID

C.  

42 Acct-Session-ID

D.  

81 Message-Authenticator

A.  

3DES

B.  

RSA

C.  

DES

D.  

AES

A.  

MDA on the router

B.  

PBR on Cisco WSA

C.  

WCCP on switch

D.  

DNS resolution on Cisco WSA

A.  

EPP focuses primarily on threats that have evaded front-line defenses that entered the environment.

B.  

Having an EPP solution allows an engineer to detect, investigate, and remediate modern threats.

C.  

EDR focuses solely on prevention at the perimeter.

D.  

Having an EDR solution gives an engineer the capability to flag offending files at the first sign of malicious behavior.

A.  

mobile device management

B.  

mobile content management

C.  

mobile application management

D.  

mobile access management

A.  

Segment different departments to different IP blocks and enable Dynamic ARp inspection on all VLANs

B.  

Ensure that noncompliant endpoints are segmented off to contain any potential damage.

C.  

Ensure that a user cannot enter the network of another department.

D.  

Perform a posture check to allow only network access to (hose Windows devices that are already patched.

E.  

Put all company users in the trusted segment of NGFW and put all servers to the DMZ segment of the Cisco NGFW. ni

A.  

The engineer is attempting to upload a hash created using MD5 instead of SHA-256

B.  

The file being uploaded is incompatible with simple detections and must use advanced detections

C.  

The hash being uploaded is part of a set in an incorrect format

D.  

The engineer is attempting to upload a file instead of a hash

A.  

Next-generation firewalls have stateless inspection capabilities, and traditional firewalls use stateful inspection.

B.  

Next-generation firewalls use dynamic packet filtering, and traditional firewalls use static packet filtering.

C.  

Next-generation firewalls have threat intelligence feeds, and traditional firewalls use signature detection.

D.  

Next-generation firewalls use intrusion prevention policies, and traditional firewalls use intrusion detection policies.