Free Practice Questions for Cisco 350-701 Exam

Which two features are used to configure Cisco ESA with a multilayer approach to fight viruses and malware?(Choose two)

• Sophos engine
• white list
• RAT
• outbreak filters
• DLP

A Cisco ESA network administrator has been tasked to use a newly installed service to help create policy based on the reputation verdict. During testing, it is discovered that the Cisco ESA is not dropping files that have an undetermined verdict. What is causing this issue?

• The policy was created to send a message to quarantine instead of drop
• The file has a reputation score that is above the threshold
• The file has a reputation score that is below the threshold
• The policy was created to disable file analysis

What is a difference between GRE over IPsec and IPsec with crypto map?

• Multicast traffic is supported by IPsec with crypto map.
• GRE over IPsec supports non-IP protocols.
• GRE provides its own encryption mechanism.
• IPsec with crypto map oilers better scalability.

Which type of data does the Cisco Stealthwatch system collect and analyze from routers, switches, and firewalls?

• NTP
• syslog
• SNMP
• NetFlow

Which network monitoring solution uses streams and pushes operational data to provide a near real-time viewof activity?

• SNMP
• SMTP
• syslog
• model-driven telemetry

Which parameter is required when configuring a Netflow exporter on a Cisco Router?

• DSCP value
• Source interface
• Exporter name
• Exporter description

Which attack is preventable by Cisco ESA but not by the Cisco WSA?

• buffer overflow
• DoS
• SQL injection
• phishing

What must be configured in Cisco ISE to enforce reauthentication of an endpoint session when an endpoint isdeleted from an identity group?

• posture assessment
• CoA
• external identity source
• SNMP probe

An organization configures Cisco Umbrella to be used for its DNS services. The organization must be able to block traffic based on the subnet that the endpoint is on but it sees only the requests from its public IP address instead of each internal IP address. What must be done to resolve this issue?

• Set up a Cisco Umbrella virtual appliance to internally field the requests and see the traffic of each IP address
• Use the tenant control features to identify each subnet being used and track the connections within the Cisco Umbrella dashboard
• Install the Microsoft Active Directory Connector to give IP address information stitched to the requests in the Cisco Umbrella dashboard
• Configure an internal domain within Cisco Umbrella to help identify each address and create policy from the domains

What is a function of the Layer 4 Traffic Monitor on a Cisco WSA?

• blocks traffic from URL categories that are known to contain malicious content
• decrypts SSL traffic to monitor for malicious content
• monitors suspicious traffic across all the TCP/UDP ports
• prevents data exfiltration by searching all the network traffic for specified sensitive information