ExamDumpsVCE 350-701 Exam Questions Real 350-701 Practice Dumps [Q116-Q136]

Rate this post

ExamDumpsVCE 350-701 Exam Questions | Real 350-701 Practice Dumps

Verified 350-701 Exam Dumps Q&As – Provide 350-701 with Correct Answers

Cisco 350-701 Exam Syllabus Topics:

Section	Weight	Objectives
Topic 1: Content Security	20%	– Email and web security 1. Web filtering and URL security 2. Secure Email Gateway concepts
Topic 2: Endpoint Protection and Detection	15%	– Endpoint security solutions 1. Malware detection techniques 2. EDR/XDR concepts
Topic 3: Security Concepts	15%	– Security principles 1. Zero Trust concepts 2. Threat vectors and attack types – Cryptography fundamentals 1. Hashing and digital signatures 2. Encryption algorithms and PKI concepts
Topic 4: Network Security	20%	– Firewalls and IPS/IDS 1. Cisco Secure Firewall basics 2. Intrusion prevention systems – Secure routing and switching 1. Control plane protection 2. Layer 2/Layer 3 security mechanisms
Topic 5: Automation and Programmability	5%	– Security automation 1. APIs and REST-based integration 2. Security orchestration concepts
Topic 6: Cloud Security	15%	– Cloud security concepts 1. Cloud workload protection 2. SaaS, PaaS, IaaS security models
Topic 7: Secure Network Access	10%	– Identity and access control 1. VPN technologies (IPsec, SSL VPN) 2. AAA concepts (TACACS+, RADIUS)

Q116. A network administrator has configured TACACS on a network device using the key Cisc0467380030 tor authentication purposes. However, users are unable to authenticate. TACACS server is reachable, but authentication is tailing. Which configuration step must the administrator complete?

Implement synchronized system clock on TACACS server that matches the network device.

Install a compatible operating system version on the TACACS server.

Configure the TACACS key on the server to match with the network device.

Apply an access control list on TACACS server to allow communication with the network device.

Q117. In which two ways does Easy Connect help control network access when used with Cisco TrustSec? (Choose two)

It allows multiple security products to share information and work together to enhance security posture in the network.

It creates a dashboard in Cisco ISE that provides full visibility of all connected endpoints.

It allows for the assignment of Security Group Tags and does not require 802.1x to be configured on the switch or the endpoint.

It integrates with third-party products to provide better visibility throughout the network.

It allows for managed endpoints that authenticate to AD to be mapped to Security Groups (PassiveID).

Q118. Drag and drop the Firepower Next Generation Intrusion Prevention System detectors from the left onto the correct definitions on the right.

Q119. What is a capability of a Cisco Secure Firewall?

file sandboxing

IPS

email spam protection

endpoint isolation

Q120. What is provided by the Secure Hash Algorithm in a VPN?

integrity

key exchange

encryption

authentication

Q121. What is managed by Cisco Security Manager?

Cisco WSA

Cisco ASA

Cisco WLC

Cisco Secure Email Gateway

Q122. Which solution combines Cisco IOS and IOS XE components to enable administrators to recognize applications, collect and send network metrics to Cisco Prime and other third-party management tools, and prioritize application traffic?

Cisco Security Intelligence

Cisco Application Visibility and Control

Cisco Model Driven Telemetry

Cisco DNA Center

Q123. Client workstations are experiencing extremely poor response time. An engineer suspects that an attacker is eavesdropping and making independent connections while relaying messages between victims to make them think they are talking to each other over a private connection. Which feature must be enabled and configured to provide relief from this type of attack?

Link Aggregation

Reverse ARP

private VLANs

Dynamic ARP Inspection

Q124. Drag and drop the common security threats from the left onto the definitions on the right.

Q125. An engineer must configure a destination list on Cisco Umbrella. The destination list must allow requests to test.domain.com and block any other URLs to .domain.com. Which configuration must be performed?
Block list: !”test”.domain.com

Allow List: test.domain.com
Block list: .domain.com
Block list: !”test”.domain.com

Allow List: *.domain.com
Block list: test.domain.com

Allow List: test.domain.com
Block list: .domain.com
Block list: .domain.com

Allow List: *.domain.com

Q126. Which feature is supported when deploying Cisco ASAv within AWS public cloud?

multiple context mode

user deployment of Layer 3 networks

IPv6

clustering

Q127. Which two preventive measures are used to control cross-site scripting? (Choose two)

Enable client-side scripts on a per-domain basis.

Incorporate contextual output encoding/escaping.

Disable cookie inspection in the HTML inspection engine.

Run untrusted HTML input through an HTML sanitization engine.

Same Site cookie attribute should not be used.

Cross-site scripting (XSS) is a web security vulnerability that allows an attacker to inject malicious code into a web page that is viewed by other users. XSS can compromise the user’s interaction with the web application, steal sensitive data, perform unauthorized actions, and more. To prevent XSS, web developers need to apply various defensive techniques to ensure that user-supplied data is not interpreted as code by the browser. Two of these techniques are:
* Incorporate contextual output encoding/escaping: This means that any user-supplied data that is displayed on the web page should be properly encoded or escaped according to the context where it appears. For example, if the data is inserted into an HTML attribute, it should be HTML attribute encoded; if the data is inserted into a JavaScript string, it should be JavaScript string encoded; and so on.
This prevents the data from breaking out of its intended context and being executed as code by the browser. Output encoding should be done by using a reliable library or framework that supports different contexts and encodings.
* Run untrusted HTML input through an HTML sanitization engine: This means that any user-supplied data that is intended to contain HTML markup should be filtered and validated by a sanitization engine that removes or escapes any potentially dangerous elements, attributes, or scripts. This prevents the attacker from injecting malicious HTML code that can execute scripts, load external resources, redirect the user, or perform other malicious actions. HTML sanitization should be done by using a well-tested and maintained library or framework that follows the best practices and standards for HTML filtering.
References :=
* [Implementing and Operating Cisco Security Core Technologies (SCOR) v1.0], Module 5: Securing the Cloud, Lesson 5.2: Web Application Security, Topic 5.2.2: Cross-Site Scripting (XSS)
* Cross Site Scripting Prevention Cheat Sheet – OWASP
* What is cross-site scripting (XSS) and how to prevent it? – Web Security Academy

Q128. An engineer is implementing a network access control solution for a client. The client has separate data and voice VLANs and the deployment is now entering the testing phase. Which configuration must be made next to ensure there are no user authentication issues?

Change the ID of the voice VLAN

Add TACACS+ as a failover backup solution.

Remove VRF settings from the client ports on the switch

Delete the downloadable MAC access control lists

Q129. The security team has installed a Cisco Secure Email Gateway. During setup, a large number of email messages containing the string “abcde1111111111” are being blocked. The security team wants to investigate and determine if the emails are part of a phishing or malware attack. Which configuration step must the security team apply?

Implement a policy to only allow email from trusted to the network senders.

Apply a policy to route all blocked emails to a separate quarantine folder.

Configure sender domain reputation policy to check if sender email domain is known to be malicious.

Configure a policy to disable spam filtering in order to expedite email delivery.

Q130. Which metric is used by the monitoring agent to collect and output packet loss and jitter information?

WSAv performance

AVC performance

OTCP performance

RTP performance

Q131. A Cisco ESA administrator has been tasked with configuring the Cisco ESA to ensure there are no viruses before quarantined emails are delivered. In addition, delivery of mail from known bad mail servers must be prevented. Which two actions must be taken in order to meet these requirements? (Choose two)

Use outbreak filters from SenderBase

Enable a message tracking service

Configure a recipient access table

Deploy the Cisco ESA in the DMZ

Scan quarantined emails using AntiVirus signatures

Q132. What is a feature of container orchestration?

ability to deploy Amazon ECS clusters by using the Cisco Container Platform data plane

ability to deploy Amazon EKS clusters by using the Cisco Container Platform data plane

ability to deploy Kubernetes clusters in air-gapped sites

automated daily updates

Q133. Which CoA response code is sent if an authorization state is changed successfully on a Cisco IOS device?

CoA-NCL

CoA-NAK

CoA-ACK

CoA-MAB

Q134. An engineer is configuring a Cisco ESA and wants to control whether to accept or reject email messages to a recipient address. Which list contains the allowed recipient addresses?

SAT

BAT

HAT

RAT

Q135. What are two functionalities of northbound and southbound APIs within Cisco SDN architecture? (Choose two.)

Southbound APIs are used to define how SDN controllers integrate with applications.

Southbound interfaces utilize device configurations such as VLANs and IP addresses.

Northbound APIs utilize RESTful API methods such as GET, POST, and DELETE.

Southbound APIs utilize CLI, SNMP, and RESTCONF.

Northbound interfaces utilize OpenFlow and OpFlex to integrate with network devices.

Q136. What is the purpose of joining Cisco WSAs to an appliance group?

All WSAs in the group can view file analysis results.