Free Cisco 350-701 Exam Dumps and 350-701 Exam Questions

Question No: 11

MultipleChoice

An engineer used a posture check on a Microsoft Windows endpoint and discovered that the MS17-010 patch was not installed, which left the endpoint vulnerable to WannaCry ransomware. Which two solutions mitigate the risk of this ransomware infection? (Choose two.)

Options

AConfigure a posture policy in Cisco Identity Services Engine to install the MS17-010 patch before allowing access on the
network.

BSet up a profiling policy in Cisco Identity Service Engine to check and endpoint patch level before allowing access on the network.

CConfigure a posture policy in Cisco Identity Services Engine to check that an endpoint patch level is met before allowing access on the network.

DConfigure endpoint firewall policies to stop the exploit traffic from being allowed to run and replicate throughout the network.

ESet up a well-defined endpoint patching strategy to ensure that endpoints have critical vulnerabilities patched in a timely fashion

Question No: 12

MultipleChoice

Which two features of Cisco DNA Center are used in a Software Defined Network solution? (Choose two.)

Options

Aaccounting

Bassurance

Cautomation

Dauthentication

Eencryption

Question No: 13

MultipleChoice

Which two features are used to configure Cisco ESA with a multilayer approach to fight viruses and malware? (Choose two).

Options

ASophos engine

Bwhite list

CRAT

Doutbreak filters

EDLP

Question No: 14

MultipleChoice

Refer to the exhibit.

Refer to the exhibit. What function does the API key perform while working with https://api.amp.cisco.com/v1/computers?

Options

Aimports requests

BHTTP authorization

CHTTP authentication

Dplays dent ID

Question No: 15

MultipleChoice

Which API method and required attribute are used to add a device into DNAC with the native API?

Options

AlastSyncTime and pid

BPOST and name

CuserSudiSerialNos and devicelnfo

DGET and serialNumber

Question No: 16

MultipleChoice

Refer to the exhibit. All servers are in the same VLAN/Subnet. DNS Server-1 and DNS Server-2 must communicate with each other, and communicate with default gateway multilayer switch. Which type of private VLAN ports should be configured to prevent communication and the file server?

Options

AConfigure GigabitEthernet0/1 as promiscuous port, GigabitEthernet0/2 as isolated port, and GigabitEthernet0/3 and GigabitEthernet... ports.

BConfigure GigabitEthernet0/1 as community port, GigabitEthernet0/2 as promiscuous port, GigabitEthernet0/3 and GigabitEthernet...0/

CConfigure GigabitEthernet0/1 as promiscuous port, GigabitEthernet0/2 as community port, and GigabitEthernet0/3 and GigabitEthen... ports.

DConfigure GigabitEthernet0/1 as community port, GigabitEthernet0/2 as isolated port, and GigabitEthernet0/3 and GigabitEthernet...OA ports.

Question No: 17

MultipleChoice

Refer to the exhibit.

Refer to the exhibit. All servers are in the same VLAN/Subnet. DNS Server-1 and DNS Server-2 must communicate with each other, and all servers must communicate with default gateway multilayer switch. Which type of private VLAN ports should be configured to prevent communication between DNS servers and the file server?

Options

AConfigure GigabitEthernet0/1 as community port, GigabitEthernet0/2 as isolated port, and GigabitEthernet0/3 and GigabitEthernet0/4 as promiscuous ports.

BConfigure GigabitEthernet0/1 as community port, GigabitEthernet0/2 as promiscuous port, Gigabit Ethernet0/3 and GigabitEthernet0/4 as isolated ports. C. Configure GigabitEthernet0/1 as promiscuous port, GigabitEthernet0/2 as isolated port and GigabitEthernet0/3 and GrgabitEthernet0/4 as community ports.

CConfigure GigabitEthernet0/1 as promiscuous port, GigabitEthernet0/2 as community port, and GigabitEthernet0/3 and GrgabitEthernet0/4 as isolated ports.

Question No: 18

DragDrop

Drag and drop the NetFlow export formats from the left onto the descriptions on the right.

Question No: 19

MultipleChoice

An engineer is configuring Cisco Umbrella and has an identity that references two different policies. Which action ensures that the...... use takes precedence over the second one?

Options

AConfigure only the policy with the most recently changed timestamp.

BMake the correct policy first in the policy order.

CPlace the policy with the most-specific configuration last in the policy order.

DConfigure the default policy to redirect the requests to the correct policy.

Question No: 20

MultipleChoice

A network security engineer must export packet captures from the Cisco FMC web browser while troubleshooting an issue. When navigating to the address Error! Hyperlink reference not valid. IP>/capure/CAPI/pcap/test.pcap, an error 403: Forbidden is given instead of the PCAP file. Which action must the engineer take to resolve this issue?

Options

ADisable the proxy setting on the browser

BDisable the HTTPS server and use HTTP instead

CUse the Cisco FTD IP address as the proxy server setting on the browser

DEnable the HTTPS server for the device platform policy