Cisco 350-701 Exam Dumps

Implementing and Operating Cisco Security Core Technologies (SCOR 350-701)

Cisco 350-701 Sample Questions

Question # 1

A network engineer is tasked with configuring a Cisco ISE server to implement external authentication against Active Directory. What must be considered about the authentication requirements? (Choose two.)

A. RADIUS communication must be permitted between the ISE server and the domain controller.
B. The ISE account must be a domain administrator in Active Directory to perform JOIN operations. 
C. Active Directory only supports user authentication by using MSCHAPv2.
D. LDAP communication must be permitted between the ISE server and the domain controller.
E. Active Directory supports user and machine authentication by using MSCHAPv2.

Answer: B,C

Show Answer

Question # 2

Cisco SensorBase gaihers threat information from a variety of Cisco products and services and performs analytics to find patterns on threats Which term describes this process?

A. deployment  
B. consumption  
C. authoring  
D. sharing  

Answer: A

Show Answer

Question # 3

Why is it important to have a patching strategy for endpoints? 

A. to take advantage of new features released with patches  
B. so that functionality is increased on a faster scale when it is used  
B. so that functionality is increased on a faster scale when it is used  
D. so that patching strategies can assist with disabling nonsecure protocols in applications  

Answer: C

Show Answer

Question # 4

How does the Cisco WSA enforce bandwidth restrictions for web applications?

A. It implements a policy route to redirect application traffic to a lower-bandwidth link.  
B. It dynamically creates a scavenger class QoS policy and applies it to each client that connects through the WSA. 
C. It sends commands to the uplink router to apply traffic policing to the application traffic. 
D. It simulates a slower link by introducing latency into application traffic. 

Answer: C

Show Answer

Question # 5

What is a description of microsegmentation?

A. Environments deploy a container orchestration platform, such as Kubernetes, to manage the application delivery.
B. Environments apply a zero-trust model and specify how applications on different servers or containers can communicate
C. Environments deploy centrally managed host-based firewall rules on each server or container. 
D. Environments implement private VLAN segmentation to group servers with similar applications.

Answer: B

Show Answer

Question # 6

An engineer is configuring their router to send NetfFow data to Stealthwatch which has an IP address of 1 1 11 using the flow record Stea!thwatch406397954 command Which additional command is required to complete the flow record?

A. transport udp 2055  
B. match ipv4 ttl  
C. cache timeout active 60  
D. destination 1.1.1.1  

Answer: B

Show Answer

Question # 7

An administrator configures new authorization policies within Cisco ISE and has difficulty profiling the devices. Attributes for the new Cisco IP phones that are profiled based on the RADIUS authentication are seen however the attributes for CDP or DHCP are not. What should the administrator do to address this issue?

An administrator configures new authorization policies within Cisco ISE and has difficulty profiling the devices. Attributes for the new Cisco IP phones that are profiled based on the RADIUS authentication are seen however the attributes for CDP or DHCP are not. What should the administrator do to address this issue?
B. Configure the authentication port-control auto feature within Cisco ISE to identify the devices that are trying to connect
C. Configure a service template within the switch to standardize the port configurations so that the correct information is sent to Cisco ISE
C. Configure a service template within the switch to standardize the port configurations so that the correct information is sent to Cisco ISE

Answer: D

Show Answer

Question # 8

When a transparent authentication fails on the Web Security Appliance, which type of access does the end user get?

A. guest  
B. limited Internet  
B. limited Internet  
D. full Internet  

Answer: C

Show Answer

Question # 9

Which feature enables a Cisco ISR to use the default bypass list automatically for web filtering? 

A. filters  
B. group key  
C. company key  
D. connector  

Answer: D

Show Answer

Question # 10

Which posture assessment requirement provides options to the client for remediation and requires the remediation within a certain timeframe?

A. Audit
B. Mandatory
C. Optional
D. Visibility  

Answer: A

Show Answer

Question # 11

Which CoA response code is sent if an authorization state is changed successfully on a Cisco IOS device?

A. CoA-NCL  
B. CoA-NAK  
C. -  
D. CoA-ACK  

Answer: D

Show Answer

Question # 12

Which two solutions help combat social engineering and phishing at the endpoint level? (Choose two.)

A. Cisco Umbrella  
B. Cisco ISE  
C. Cisco DNA Center  
D. Cisco TrustSec  
E. Cisco Duo Security  

Answer: A,E

Show Answer

Question # 13

A network engineer must migrate a Cisco WSA virtual appliance from one physical host to another physical host by using VMware vMotion. What is a requirement for both physical hosts?

A. The hosts must run Cisco AsyncOS 10.0 or greater.  
B. The hosts must run different versions of Cisco AsyncOS.  
C. The hosts must have access to the same defined network.  
D. The hosts must use a different datastore than the virtual appliance.  

Answer: C

Show Answer

Question # 14

A network administrator is configuring a role in an access control policy to block certain URLs and selects the "Chat and instant Messaging" category. which reputation score should be selected to accomplish this goal?

A. 3  
B. 5  
C. 10  
D. 1  

Answer: C

Show Answer

Question # 15

Which system performs compliance checks and remote wiping? 

A. MDM  
B. ISE  
C. AMP  
D. OTP  

Answer: A

Show Answer

Question # 16

Which Cisco platform processes behavior baselines, monitors for deviations, and reviews for malicious processes in data center traffic and servers while performing software vulnerability detection?

A. Cisco Tetration  
B. Cisco ISE?  
C. Cisco AMP for Network  
D. Cisco AnyConnect  

Answer: A

Show Answer

Question # 17

Which Cisco platform processes behavior baselines, monitors for deviations, and reviews for malicious processes in data center traffic and servers while performing software vulnerability detection?

A. Cisco Tetration  
B. Cisco ISE?  
C. Cisco AMP for Network  
D. Cisco AnyConnect  

Answer: A

Show Answer

Question # 18

Which technology should be used to help prevent an attacker from stealing usernames and passwords of users within an organization?

A. RADIUS-based REAP  
B. fingerprinting  
C. Dynamic ARP Inspection  
D. multifactor authentication

Answer: A

Show Answer

Question # 19

Which Cisco platform provides an agentless solution to provide visibility across the network including encrypted traffic analytics to detect malware in encrypted traffic without the need for decryption?

A. Cisco Advanced Malware Protection  
B. Cisco Stealthwatch  
C. Cisco Identity Services Engine  
D. Cisco AnyConnect  

Answer: B

Show Answer

Question # 20

An engineer is configuring device-hardening on a router in order to prevent credentials from being seen if the router configuration was compromised. Which command should be used?

A. service password-encryption  
B. username privilege 15 password 
C. service password-recovery  
D. username < username> <password> 

Answer: A

Show Answer

Question # 21

What is a feature of container orchestration?

A. ability to deploy Amazon ECS clusters by using the Cisco Container Platform data plane  
B. ability to deploy Amazon EKS clusters by using the Cisco Container Platform data plane  
C. ability to deploy Kubernetes clusters in air-gapped sites  
D. automated daily updates  

Answer: C

Show Answer

Question # 22

Which security solution protects users leveraging DNS-layer security?

A. Cisco ISE  
B. Cisco FTD  
C. Cisco Umbrella  
D. Cisco ASA  

Answer: C

Show Answer

Question # 23

Which type of encryption uses a public key and private key?

A. Asymmetric  
B. Symmetric  
C. Linear  
D. Nonlinear  

Answer: A

Show Answer

Question # 24

What is an advantage of the Cisco Umbrella roaming client?

A. the ability to see all traffic without requiring TLS decryption  
B. visibility into IP-based threats by tunneling suspicious IP connections  
C. the ability to dynamically categorize traffic to previously uncategorized sites  
D. visibility into traffic that is destined to sites within the office environment  

Answer: B

Show Answer

Question # 25

An engineer has been tasked with configuring a Cisco FTD to analyze protocol fields and detect anomalies in the traffic from industrial systems. What must be done to meet these requirements? 

A. Implement pre-filter policies for the CIP preprocessor  
B. Enable traffic analysis in the Cisco FTD
C. Configure intrusion rules for the DNP3 preprocessor
D. Modify the access control policy to trust the industrial traffic

Answer: C

Show Answer

Question # 26

Which attribute has the ability to change during the RADIUS CoA?

A. NTP  
B. Authorization  
C. Accessibility  
D. Membership  

Answer: B

Show Answer

Question # 27

What are two things to consider when using PAC files with the Cisco WSA? (Choose two.)

A. If the WSA host port is changed, the default port redirects web traffic to the correct port automatically.
B. PAC files use if-else statements to determine whether to use a proxy or a direct connection for traffic between the PC and the host.
C. The WSA hosts PAC files on port 9001 by default. 
D. The WSA hosts PAC files on port 6001 by default. 
E. By default, they direct traffic through a proxy when the PC and the host are on the same subnet. 

Answer: B,C

Show Answer

Question # 28

When a next-generation endpoint security solution is selected for a company, what are two key deliverables that help justify the implementation? (Choose two.)

A. signature-based endpoint protection on company endpoints  
B. macro-based protection to keep connected endpoints safe  
C. continuous monitoring of all files that are located on connected endpoints  
D. email integration to protect endpoints from malicious content that is located in email  
E. real-time feeds from global threat intelligence centers  

Answer: C,E

Show Answer

Question # 29

An engineer adds a custom detection policy to a Cisco AMP deployment and encounters issues with the configuration. The simple detection mechanism is configured, but the dashboard indicates that the hash is not 64 characters and is non-zero. What is the issue?

A. The engineer is attempting to upload a hash created using MD5 instead of SHA-256  
B. The file being uploaded is incompatible with simple detections and must use advanced detections
C. The hash being uploaded is part of a set in an incorrect format  
D. The engineer is attempting to upload a file instead of a hash  

Answer: A

Show Answer

Question # 30

Which Cisco ASA deployment model is used to filter traffic between hosts in the same IP subnet using higher-level protocols without readdressing the network? 

A. routed mode  
B. transparent mode  
C. single context mode  
D. multiple context mode  

Answer: B

Show Answer

Question # 31

What is a difference between an XSS attack and an SQL injection attack?

A. SQL injection is a hacking method used to attack SQL databases, whereas XSS attacks can exist in many different types of applications 
B. XSS is a hacking method used to attack SQL databases, whereas SQL injection attacks can exist in many different types of applications 
C. SQL injection attacks are used to steal information from databases whereas XSS attacks are used to redirect users to websites where attackers can steal data from them
D. XSS attacks are used to steal information from databases whereas SQL injection attacks are used to redirect users to websites where attackers can steal data from them

Answer: C

Show Answer

Question # 32

Which Cisco security solution determines if an endpoint has the latest OS updates and patches installed on the system?

A. Cisco Endpoint Security Analytics  
B. Cisco AMP for Endpoints  
C. Endpoint Compliance Scanner  
D. Security Posture Assessment Service  

Answer: D

Show Answer

Question # 33

Which security product enables administrators to deploy Kubernetes clusters in air-gapped sites without needing Internet access?

A. Cisco Content Platform  
B. Cisco Container Controller  
C. Cisco Container Platform  
D. Cisco Cloud Platform  

Answer: C

Show Answer

Question # 34

A hacker initiated a social engineering attack and stole username and passwords of some users within a company. Which product should be used as a solution to this problem?

A. Cisco NGFW  
B. Cisco AnyConnect  
C. Cisco AMP for Endpoints  
D. Cisco Duo  

Answer: D

Show Answer

Question # 35

An administrator is establishing a new site-to-site VPN connection on a Cisco IOS router. The organization needs to ensure that the ISAKMP key on the hub is used only for terminating traffic from the IP address of 172.19.20.24. Which command on the hub will allow the administrator to accomplish this?

A. crypto ca identity 172.19.20.24  
B. crypto isakmp key Cisco0123456789 172.19.20.24  
C. crypto enrollment peer address 172.19.20.24  
D. crypto isakmp identity address 172.19.20.24  

Answer: B

Show Answer

Question # 36

Why is it important for the organization to have an endpoint patching strategy?

A. so the organization can identify endpoint vulnerabilities  
B. so the internal PSIRT organization is aware of the latest bugs  
C. so the network administrator is notified when an existing bug is encountered  
D. so the latest security fixes are installed on the endpoints  

Answer: C

Show Answer

Question # 37

Which metric is used by the monitoring agent to collect and output packet loss and jitter information?

A. WSAv performance  
B. AVC performance  
C. OTCP performance  
D. RTP performance  

Answer: B

Show Answer

Question # 38

Which function is performed by certificate authorities but is a limitation of registration authorities?

A. accepts enrollment requests  
B. certificate re-enrollment  
C. verifying user identity  
D. CRL publishing  

Answer: C

Show Answer

Question # 39

Which function is included when Cisco AMP is added to web security? 

A. multifactor, authentication-based user identity  
B. detailed analytics of the unknown file's behavior  
C. phishing detection on emails  
D. threat prevention on an infected endpoint

Answer: B

Show Answer

Question # 40

Which service allows a user export application usage and performance statistics with Cisco Application Visibility and control?

A. SNORT  
B. NetFlow  
C. SNMP  
D. 802.1X  

Answer: B

Show Answer

Question # 41

An engineer must modify a policy to block specific addresses using Cisco Umbrella. The policy is created already and is actively u: of the default policy elements. What else must be done to accomplish this task?

A. Add the specified addresses to the identities list and create a block action.  
B. Create a destination list for addresses to be allowed or blocked.  
C. Use content categories to block or allow specific addresses.  
D. Modify the application settings to allow only applications to connect to required addresses. 

Answer: B

Show Answer