Free Cisco 350-701 Exam Dumps and 350-701 Exam Questions

Question No: 1

MultipleChoice

Which term describes when the Cisco Secure Firewall downloads threat intelligence updates from Cisco Tables?

Options

Aanalysis

Bsharing

Cauthoring

Dconsumption

Question No: 2

MultipleChoice

How does Cisco Umbrella archive logs to an enterprise-owned storage?

Options

Aby using the Application Programming Interface to fetch the logs

Bby sending logs via syslog to an on-premises or cloud-based syslog server

Cby the system administrator downloading the logs from the Cisco Umbrella web portal

Dby being configured to send logs to a self-managed AWS S3 bucket

Question No: 3

MultipleChoice

Which two descriptions of AES encryption are true? (Choose two.)

Options

AAES is less secure than 3DES

BAES is more secure than 3DES

CAES can use a 168-bit key for encryption.

DAES can use a 256-bit key for encryption.

EAES encrypts and decrypts a key three times in sequence

Question No: 4

MultipleChoice

What are two list types within AMP for Endpoints Outbreak Control? (Choose two.)

Options

Ablocked ports

Bsimple custom detections

Ccommand and control

Dallowed applications

EURL

Question No: 5

MultipleChoice

For which two conditions can an endpoint be checked using ISE posture assessment? (Choose two.)

Options

Acomputer identity

BWindows service

Cuser identity

DWindows firewall

Edefault browser

Question No: 6

MultipleChoice

Which two activities can be done using Cisco DNA Center? (Choose two.)

Options

ADHCP

Bdesign

Caccounting

DDNS

Eprovision

Question No: 7

MultipleChoice

When wired 802.1X authentication is implemented, which two components are required? (Choose two.)

Options

Aauthentication server: Cisco Identity Service Engine

Bsupplicant: Cisco AnyConnect ISE Posture module

Cauthenticator: Cisco Catalyst switch

Dauthenticator: Cisco Identity Services Engine

Eauthentication server: Cisco Prime Infrastructure

Question No: 8

MultipleChoice

Which two mechanisms are used to control phishing attacks? (Choose two.)

Options

AEnable browser alerts for fraudulent websites

BDefine security group memberships

CRevoke expired CRL of the websites

DUse antispyware software

EImplement email filtering techniques

Question No: 9

MultipleChoice

Under which two circumstances is a CoA issued? (Choose two.)

Options

AA new authentication rule was added to the policy on the Policy Service node

BAn endpoint is deleted on the Identity Service Engine server

CA new Identity Source Sequence is created and referenced in the authentication policy

DAn endpoint is profiled for the first time

EA new Identity Service Engine server is added to the deployment with the Administration persona

Question No: 10

MultipleChoice

Which two endpoint measures are used to minimize the chances of falling victim to phishing and social engineering attacks? (Choose two.)

Options

APatch for cross-site scripting

BPerform backups to the private cloud.

CProtect against input validation and character escapes in the endpoint.

DInstall a spam and virus email filter

EProtect systems with an up-to-date antimalware program