File Info
| Exam | Implementing and Operating Cisco Security Core Technologies |
| Number | 350-701 |
| File Name | Cisco.350-701.CertDumps.2024-12-18.328q.tqb |
| Size | 8 MB |
| Posted | Dec 18, 2024 |
| Download | Cisco.350-701.CertDumps.2024-12-18.328q.tqb |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
Which two request methods of REST API are valid on the Cisco ASA Platform? (Choose two.)
- put
- options
- get
- push
- connect
Correct answer: AC
Explanation:
Reference:https://www.cisco.com/c/en/us/td/docs/security/asa/api/qsg-asa-api.html Reference:
https://www.cisco.com/c/en/us/td/docs/security/asa/api/qsg-asa-api.html
Question 2
The main function of northbound APIs in the SDN architecture is to enable communication between which two areas of a network?
- SDN controller and the cloud
- management console and the SDN controller
- management console and the cloud
- SDN controller and the management solution
Correct answer: D
Question 3
In which form of attack is alternate encoding, such as hexadecimal representation, most often observed?
- smurf
- distributed denial of service
- cross-site scripting
- rootkit exploit
Correct answer: C
Explanation:
cross-site scripting is a correct answer. cross-site scripting is a correct answer.
Question 4
What is the difference between deceptive phishing and spear phishing?
- Deceptive phishing is an attacked aimed at a specific user in the organization who holds a C-level role.
- A spear phishing campaign is aimed at a specific person versus a group of people.
- Spear phishing is when the attack is aimed at the C-level executives of an organization.
- Deceptive phishing hijacks and manipulates the DNS server of the victim and redirects the user to a falsewebpage.
Correct answer: B
Explanation:
A spear phishing campaign is aimed at a specific person versus a group of people. A spear phishing campaign is aimed at a specific person versus a group of people.
Question 5
Which two behavioral patterns characterize a ping of death attack? (Choose two.)
- The attack is fragmented into groups of 16 octets before transmission.
- The attack is fragmented into groups of 8 octets before transmission.
- Short synchronized bursts of traffic are used to disrupt TCP connections.
- Malformed packets are used to crash systems.
- Publicly accessible DNS servers are typically used to execute the attack.
Correct answer: BD
Explanation:
Reference:https://en.wikipedia.org/wiki/Ping_of_death Reference:
https://en.wikipedia.org/wiki/Ping_of_death
Question 6
Which two mechanisms are used to control phishing attacks? (Choose two.)
- Enable browser alerts for fraudulent websites.
- Define security group memberships.
- Revoke expired CRL of the websites.
- Use antispyware software.
- Implement email filtering techniques.
Correct answer: AE
Explanation:
Enable browser alerts for fraudulent websites.Implement email filtering techniques. Enable browser alerts for fraudulent websites.
Implement email filtering techniques.
Question 7
What are two rootkit types? (Choose two.)
- registry
- buffer mode
- user mode
- bootloader
- virtual
Correct answer: CD
Explanation:
1. Kernel rootkit2. Hardware or firmware rootkit3. Hyper-V rootkits4. Bootloader rootkit or bootkit5. Memory rootkit6. User-mode or application rootkit 1. Kernel rootkit
2. Hardware or firmware rootkit
3. Hyper-V rootkits
4. Bootloader rootkit or bootkit
5. Memory rootkit
6. User-mode or application rootkit
Question 8
How is DNS tunneling used to exfiltrate data out of a corporate network?
- It leverages the DNS server by permitting recursive lookups to spread the attack to other DNS servers
- It encodes the payload with random characters that are broken into short strings and the DNS server rebuildsthe exfiltrated data
- It redirects DNS requests to a malicious server used to steal user credentials, which allows further damageand theft on the network
- It corrupts DNS servers by replacing the actual IP address with a rogue address to collect information orstart other attacks
Correct answer: B
Explanation:
It encodes the payload with random characters that are broken into short strings and the DNS server rebuilds the exfiltrated data It encodes the payload with random characters that are broken into short strings and the DNS server rebuilds the exfiltrated data
Question 9
Which type of attack is social engineering?
- trojan
- MITM
- phishing
- malware
Correct answer: C
Explanation:
phishing is a correct answer. phishing is a correct answer.
Question 10
What are two DDoS attack categories? (Choose two.)
- protocol
- source-based
- database
- sequential
- volume-based
Correct answer: AE
Explanation:
Answer A and E. There are three different general categories of DDoS attacks:Volume-based DDoS attacksApplication DDoS attacksLow-rate DoS (LDoS) attackshttps://tools.cisco.com/security/center/resources/guide_ddos_defense.html Answer A and E.
There are three different general categories of DDoS attacks:
Volume-based DDoS attacks
Application DDoS attacks
Low-rate DoS (LDoS) attacks
https://tools.cisco.com/security/center/resources/guide_ddos_defense.html
