What Certified 350-701 Free Download Is

NEW QUESTION 1
In which cloud services model is the tenant responsible for virtual machine OS patching?

• A. IaaS
• B. UCaaS
• C. PaaS
• D. SaaS

Answer: A

Explanation:
Reference: https://www.cmswire.com/cms/information-management/cloud-service-models-iaas-saas-paas-how-microsoft-office-365-azure-fit-in-021672.php

NEW QUESTION 2
The main function of northbound APIs in the SDN architecture is to enable communication between which two areas of a network?

• A. SDN controller and the cloud
• B. management console and the SDN controller
• C. management console and the cloud
• D. SDN controller and the management solution

Answer: D

NEW QUESTION 3
An engineer needs a solution for TACACS+ authentication and authorization for device administration. The engineer also wants to enhance wired and wireless network security by requiring users and endpoints to use 802.1X, MAB, or WebAuth. Which product meets all of these requirements?

• A. Cisco Prime Infrastructure
• B. Cisco Identity Services Engine
• C. Cisco Stealthwatch
• D. Cisco AMP for Endpoints

Answer: B

NEW QUESTION 4
Which feature requires a network discovery policy on the Cisco Firepower Next Generation Intrusion Prevention System?

• A. security intelligence
• B. impact flags
• C. health monitoring
• D. URL filtering

Answer: A

NEW QUESTION 5
Refer to the exhibit.

What does the number 15 represent in this configuration?

• A. privilege level for an authorized user to this router
• B. access list that identifies the SNMP devices that can access the router
• C. interval in seconds between SNMPv3 authentication attempts
• D. number of possible failed attempts until the SNMPv3 user is locked out

Answer: B

NEW QUESTION 6
What is a characteristic of traffic storm control behavior?

• A. Traffic storm control drops all broadcast and multicast traffic if the combined traffic exceeds the level within the interval.
• B. Traffic storm control cannot determine if the packet is unicast or broadcast.
• C. Traffic storm control monitors incoming traffic levels over a 10-second traffic storm control interval.
• D. Traffic storm control uses the Individual/Group bit in the packet source address to determine if the packet is unicast or broadcast.

Answer: A

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/routers/7600/ios/12-1E/configuration/guide/storm.html

NEW QUESTION 7
Which two features are used to configure Cisco ESA with a multilayer approach to fight viruses and malware? (Choose two.)

• A. Sophos engine
• B. white list
• C. RAT
• D. outbreak filters
• E. DLP

Answer: AD

NEW QUESTION 8
Which two behavioral patterns characterize a ping of death attack? (Choose two.)

• A. The attack is fragmented into groups of 16 octets before transmission.
• B. The attack is fragmented into groups of 8 octets before transmission.
• C. Short synchronized bursts of traffic are used to disrupt TCP connections.
• D. Malformed packets are used to crash systems.
• E. Publicly accessible DNS servers are typically used to execute the attack.

Answer: BD

Explanation:
Reference: https://en.wikipedia.org/wiki/Ping_of_death

NEW QUESTION 9
Which solution combines Cisco IOS and IOS XE components to enable administrators to recognize applications, collect and send network metrics to Cisco Prime and other third-party management tools, and prioritize application traffic?

• A. Cisco Security Intelligence
• B. Cisco Application Visibility and Control
• C. Cisco Model Driven Telemetry
• D. Cisco DNA Center

Answer: B

NEW QUESTION 10
Which ID store requires that a shadow user be created on Cisco ISE for the admin login to work?

• A. RSA SecureID
• B. Internal Database
• C. Active Directory
• D. LDAP

Answer: C

NEW QUESTION 11
Which deployment model is the most secure when considering risks to cloud adoption?

• A. public cloud
• B. hybrid cloud
• C. community cloud
• D. private cloud

Answer: D

NEW QUESTION 12
Refer to the exhibit.

Which command was used to display this output?

• A. show dot1x all
• B. show dot1x
• C. show dot1x all summary
• D. show dot1x interface gi1/0/12

Answer: A

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_8021x/configuration/xe-3se/3850/sec-user-8021x-xe-3se-3850-book/config-ieee-802x-pba.html

NEW QUESTION 13
When wired 802.1X authentication is implemented, which two components are required? (Choose two.)

• A. authentication server: Cisco Identity Service Engine
• B. supplicant: Cisco AnyConnect ISE Posture module
• C. authenticator: Cisco Catalyst switch
• D. authenticator: Cisco Identity Services Engine
• E. authentication server: Cisco Prime Infrastructure

Answer: AC

Explanation:
Reference: https://www.lookingpoint.com/blog/ise-series-802.1x

NEW QUESTION 14
Which flaw does an attacker leverage when exploiting SQL injection vulnerabilities?

• A. user input validation in a web page or web application
• B. Linux and Windows operating systems
• C. database
• D. web page images

Answer: C

Explanation:
Reference: https://tools.cisco.com/security/center/resources/sql_injection

NEW QUESTION 15
Which feature is supported when deploying Cisco ASAv within AWS public cloud?

• A. multiple context mode
• B. user deployment of Layer 3 networks
• C. IPv6
• D. clustering

Answer: B

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/asav/quick-start-book/asav-96-qsg/asav-aws.html

NEW QUESTION 16
......