Implementing and Operating Cisco Security Core Technologies (350-701) Free Practice Test

Question 1

Refer to the exhibit.

Which configuration item makes it possible to have the AAA session on the network?

A. aaa authentication enable default enable

B. aaa authentication login console ise

C. aaa authorization exec default ise

D. aaa authorization network default group ise

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

An engineer configures new features within the Cisco Umbrella dashboard and wants to identify and proxy traffic that is categorized as risky domains and may contain safe and malicious content. Which action accomplishes these objectives?

A. Upload the threat intelligence database to Cisco Umbrella for the most current information on reputations and to have the destination lists block them.

B. Configure intelligent proxy within Cisco Umbrella to intercept and proxy the requests for only those categories.

C. Configure URL filtering within Cisco Umbrella to track the URLs and proxy the requests for those categories and below.

D. Create a new site within Cisco Umbrella to block requests from those categories so they can be sent to the proxy device.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

What is a difference between weak passwords and missing encryption?

A. Weak passwords cause programs to crash, and missing encryption sends data to a memory location.

B. Weak passwords allow programs to be renamed, and missing encryption hides .exe extensions.

C. Weak passwords are guessed easily, and missing encryption allows information to be decrypted.

D. Weak passwords consume bandwidth, and missing encryption allows user information to be hijacked.

Correct Answer: C

Question 4

Which policy represents a shared set of features or parameters that define the aspects of a managed device that are likely to be similar to other managed devices in a deployment?

A. Group Policy

B. Access Control Policy

C. Platform Service Policy

D. Device Management Policy

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

When a Cisco Secure Web Appliance checks a web request, what occurs if it is unable to match a user- defined policy?

A. It blocks the request.

B. It applies the next identification profile policy.

C. It applies the global policy.

D. It applies the advanced policy.

Correct Answer: C

Question 6

How does Cisco AMP for Endpoints provide next-generation protection?

A. It integrates with Cisco FTD devices.

B. It utilizes Cisco pxGrid, which allows Cisco AMP to pull threat feeds from threat intelligence centers.

C. It leverages an endpoint protection platform and endpoint detection and response.

D. It encrypts data on user endpoints to protect against ransomware.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

For Cisco IOS PKI, which two types of Servers are used as a distribution point for CRLs? (Choose two)

A. subordinate CA

B. SDP

C. SCP

D. LDAP

E. HTTP

Correct Answer: D,E

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

A network administrator configures Dynamic ARP Inspection on a switch. After Dynamic ARP Inspection is applied, all users on that switch are unable to communicate with any destination. The network administrator checks the interface status of all interfaces, and there is no err-disabled interface. What is causing this problem?

A. Dynamic ARP Inspection has not been enabled on all VLANs

B. The no ip arp inspection trust command is applied on all user host interfaces

C. The ip arp inspection limit command is applied on all interfaces and is blocking the traffic of all users.

D. DHCP snooping has not been enabled on all VLANs.

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 9

Which metric is used by the monitoring agent to collect and output packet loss and jitter information?

A. RTP performance

B. AVC performance

C. WSAv performance

D. OTCP performance

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 10

How does Cisco Umbrella protect clients when they operate outside of the corporate network?

A. by using the Cisco Umbrella roaming client

B. by modifying the registry for DNS lookups

C. by forcing DNS queries to the corporate name servers

D. by using Active Directory group policies to enforce Cisco Umbrella DNS servers

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 11

An engineer needs a cloud solution that will monitor traffic, create incidents based on events, and integrate with other cloud solutions via an API. Which solution should be used to accomplish this goal?

A. Cisco Cloudlock

B. CASB

C. Adaptive MFA

D. SIEM

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 12

An engineer wants to generate NetFlow records on traffic traversing the Cisco ASA. Which Cisco ASA command must be used?

A. ip flow monitor input

B. flow-export destination inside 1.1.1.1 2055

C. flow exporter

D. ip flow-export destination 1.1.1.1 2055

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 13

What is a language format designed to exchange threat intelligence that can be transported over the TAXII protocol?

A. pxGrid

B. SMTP

C. STIX

D. XMPP

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Cisco Implementing and Operating Cisco Security Core Technologies (350-701) Free Practice Test