100% Accurate Answers! Mar-2025 350-701 Actual Real Exam Questions [Q206-Q223]

Rate this post

100% Accurate Answers! Mar-2025 350-701 Actual Real Exam Questions

Best Value Available! 2025 Realistic Verified Free 350-701 Exam Questions

To pass the Cisco 350-701 exam, candidates must demonstrate their ability to configure, implement, and troubleshoot various security solutions including firewalls, VPNs, intrusion prevention systems, and more. They should also have a deep understanding of security policies, risk management, and compliance standards.

NEW QUESTION 206
Drag and drop the capabilities from the left onto the correct technologies on the right.

NEW QUESTION 207
A user has a device in the network that is receiving too many connection requests from multiple machines.
Which type of attack is the device undergoing?

SYN flood

slowloris

pharming

phishing

Explanation
https://www.cisco.com/c/en/us/products/security/what-is-a-ddos-attack.html#~types-of-ddos-attacks

NEW QUESTION 208
An engineer is adding a Cisco router to an existing environment. NTP authentication is configured on all devices in the environment with the command ntp authentication-key 1 md5 Clsc427128380. There are two routers on the network that are configured as NTP servers for redundancy, 192.168.1.110 and 192.168.1.111. 192.168.1.110 is configured as the authoritative time source. What command must be configured on the new router to use 192.168.1.110 as its primary time source without the new router attempting to offer time to existing devices?

ntp server 192.168.1.110 primary key 1

ntp peer 192.168.1.110 prefer key 1

ntp server 192.168.1.110 key 1 prefer

ntp peer 192.168.1.110 key 1 primary

NEW QUESTION 209

Refer to the exhibit. Which command was used to generate this output and to show which ports are authenticating with dot1x or mab?

show authentication registrations

show authentication method

show dot1x all

show authentication sessions

NEW QUESTION 210
An organization is using DNS services for their network and want to help improve the security of the DNS infrastructure. Which action accomplishes this task?

Use DNSSEC between the endpoints and Cisco Umbrella DNS servers.

Modify the Cisco Umbrella configuration to pass queries only to non-DNSSEC capable zones.

Integrate Cisco Umbrella with Cisco CloudLock to ensure that DNSSEC is functional.

Configure Cisco Umbrella and use DNSSEC for domain authentication to authoritative servers.

NEW QUESTION 211
Which characteristic is unique to a Cisco WSAv as compared to a physical appliance?

supports VMware vMotion on VMware ESXi

requires an additional license

performs transparent redirection

supports SSL decryption

To prevent rogue NTP servers from inserting themselves as the authoritative time source, the administrator needs to configure NTP authentication and specify the interface for syncing to the NTP server. NTP authentication allows the ASA to verify the identity and integrity of the NTP packets received from the server, using a shared secret key. Specifying the interface for syncing to the NTP server ensures that the ASA uses the correct source address for sending and receiving NTP packets, and avoids potential routing issues. The other options are not required or relevant for this task. Specifying the NTP version is optional and does not affect security. Configuring the NTP stratum is only applicable for NTP servers, not clients. The ASA can only act as an NTP client, not a server. Setting the NTP DNS hostname is not recommended, as it introduces a dependency on DNS resolution and may cause synchronization problems if the DNS server changes the IP address of the NTP server. References := Some possible references are:
* Configure NTP Authentication on Secure Network Analytics
* CLI Book 1: Cisco ASA Series General Operations CLI Configuration Guide, 9.6 – Basic Settings
* Cisco ASA NTP and Clock Configuration with Examples

NEW QUESTION 212
Drag and drop the descriptions from the left onto the correct protocol versions on the right.

Explanation:
Graphical user interface Description automatically generated with low confidence

NEW QUESTION 213
Which function is the primary function of Cisco AMP threat Grid?

automated email encryption

applying a real-time URI blacklist

automated malware analysis

monitoring network traffic

NEW QUESTION 214
How does a WCCP-configured router identify if the Cisco WSA is functional?

If an ICMP ping fails three consecutive times between a router and the WSA, traffic is no longer transmitted to the router.

If an ICMP ping fails three consecutive times between a router and the WSA, traffic is no longer transmitted to the WSA.

The WSA sends a Here-l-Am message every 10 seconds, and the router acknowledges with an ISee-You message.

The router sends a Here-l-Am message every 10 seconds, and the WSA acknowledges with an ISee-You message.

NEW QUESTION 215
A large organization wants to deploy a security appliance in the public cloud to form a site-to-site VPN and link the public cloud environment to the private cloud in the headquarters data center. Which Cisco security appliance meets these requirements?

Cisco Cloud Orchestrator

Cisco ASAV

Cisco WSAV

Cisco Stealthwatch Cloud

NEW QUESTION 216
Which technology limits communication between nodes on the same network segment to individual applications?

serverless infrastructure

microsegmentation

SaaS deployment

machine-to-machine firewalling

NEW QUESTION 217
Drag and drop the capabilities from the left onto the correct technologies on the right.

Explanation:
Text, chat or text message Description automatically generated

NEW QUESTION 218
A network administrator is configuring a switch to use Cisco ISE for 802.1X. An endpoint is failing authentication and is unable to access the network. Where should the administrator begin troubleshooting to verify the authentication details?

Adaptive Network Control Policy List

Context Visibility

Accounting Reports

RADIUS Live Logs

How To Troubleshoot ISE Failed Authentications & Authorizations
Check the ISE Live Logs
Login to the primary ISE Policy Administration Node (PAN).
Go to Operations > RADIUS > Live Logs
(Optional) If the event is not present in the RADIUS Live Logs, go to Operations > Reports > Reports > Endpoints and Users > RADIUS Authentications Check for Any Failed Authentication Attempts in the Log

NEW QUESTION 219
An engineer has been tasked with configuring a Cisco FTD to analyze protocol fields and detect anomalies in the traffic from industrial systems. What must be done to meet these requirements?

Implement pre-filter policies for the CIP preprocessor

Enable traffic analysis in the Cisco FTD

Configure intrusion rules for the DNP3 preprocessor

Modify the access control policy to trust the industrial traffic

Explanation”configure INTRUSION RULES for DNP3″ -> Documentation states, that enabling INTRUSION RULES is mandatory for CIP to work + required preprocessors (in Network Access Policy – NAP) will be enabled automatically:
“If you want the CIP preprocessor rules listed in the following table to generate events, you MUST enable them. See Setting Intrusion Rule States for information on enabling rules.”
“If the Modbus, DNP3, or CIP preprocessor is disabled, and you enable and deploy an intrusion rule that requires one of these preprocessors, the system automatically uses the required preprocessor, with its current settings, although the preprocessor remains disabled in the web interface for the corresponding network analysis policy.”
[1]
https://www.cisco.com/c/en/us/td/docs/security/firepower/630/configuration/guide/fpmc-config-guide-v63/scada

NEW QUESTION 220
Drag and drop the NetFlow export formats from the left onto the descriptions on the right.

NEW QUESTION 221
An engineer has enabled LDAP accept queries on a listener. Malicious actors must be prevented from quickly identifying all valid recipients. What must be done on the Cisco ESA to accomplish this goal?

Use Bounce Verification

Configure incoming content filters.

Bypass LDAP access queries in the recipient access table.

Configure Directory Harvest Attack Prevention

NEW QUESTION 222
Why should organizations migrate to an MFA strategy for authentication?

Single methods of authentication can be compromised more easily than MFA.

Biometrics authentication leads to the need for MFA due to its ability to be hacked easily.

MFA methods of authentication are never compromised.

MFA does not require any piece of evidence for an authentication mechanism.

NEW QUESTION 223
Which Cisco AMP feature allows an engineer to look back to trace past activities, such as file and process activity on an endpoint?

endpoint isolation

advanced search

advanced investigation

retrospective security

Loading …