File Info
| Exam | Implementing and Operating Cisco Security Core Technologies |
| Number | 350-701 |
| File Name | Cisco.350-701.Lead2Pass.2021-02-11.127q.vcex |
| Size | 3 MB |
| Posted | Feb 11, 2021 |
| Download | Cisco.350-701.Lead2Pass.2021-02-11.127q.vcex |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
What are two list types within AMP for Endpoints Outbreak Control? (Choose two.)
- blocked ports
- simple custom detections
- command and control
- allowed applications
- URL
Correct answer: BD
Explanation:
https://docs.amp.cisco.com/en/A4E/AMP%20for%20Endpoints%20User %20Guide.pdf chapter 2 https://docs.amp.cisco.com/en/A4E/AMP%20for%20Endpoints%20User %20Guide.pdf chapter 2
Question 2
Which command enables 802.1X globally on a Cisco switch?
- dot1x system-auth-control
- dot1x pae authenticator
- authentication port-control auto
- aaa new-model
Correct answer: A
Explanation:
https://www.cisco.com/c/en/us/td/docs/routers/nfvis/switch_command/b-nfvis-switch-commandreference/802_1x_commands.html https://www.cisco.com/c/en/us/td/docs/routers/nfvis/switch_command/b-nfvis-switch-commandreference/802_1x_commands.html
Question 3
What is the function of Cisco Cloudlock for data security?
- data loss prevention
- controls malicious cloud apps
- detects anomalies
- user and entity behavior analytics
Correct answer: A
Explanation:
https://umbrellA.cisco.com/products/casb https://umbrellA.cisco.com/products/casb
Question 4
For which two conditions can an endpoint be checked using ISE posture assessment? (Choose two.)
- computer identity
- Windows service
- user identity
- Windows firewall
- default browser
Correct answer: BC
Question 5
What is a characteristic of Dynamic ARP Inspection?
- DAI determines the validity of an ARP packet based on valid IP to MAC address bindings from the DHCP snooping binding database.
- In a typical network, make all ports as trusted except for the ports connecting to switches, which are untrusted.
- DAI associates a trust state with each switch.
- DAI intercepts all ARP requests and responses on trusted ports only.
Correct answer: A
Question 6
Which Cisco product provides proactive endpoint protection and allows administrators to centrally manage the deployment?
- NGFW
- AMP
- WSA
- ESA
Correct answer: B
Question 7
Where are individual sites specified to be blacklisted in Cisco Umbrella?
- application settings
- content categories
- security settings
- destination lists
Correct answer: D
Question 8
Which statement about IOS zone-based firewalls is true?
- An unassigned interface can communicate with assigned interfaces
- Only one interface can be assigned to a zone.
- An interface can be assigned to multiple zones.
- An interface can be assigned only to one zone.
Correct answer: D
Explanation:
https://www.cisco.com/c/en/us/support/docs/security/ios-firewall/98628-zone-design-guide.html https://www.cisco.com/c/en/us/support/docs/security/ios-firewall/98628-zone-design-guide.html
Question 9
Which two activities can be done using Cisco DNA Center? (Choose two.)
- DHCP
- design
- accounting
- DNS
- provision
Correct answer: BE
Explanation:
https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-andmanagement/dna-center/1-2-1/user_guide/b_dnac_ug_1_2_1/b_dnac_ug_1_2_chapter_00.pdf https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-andmanagement/dna-center/1-2-1/user_guide/b_dnac_ug_1_2_1/b_dnac_ug_1_2_chapter_00.pdf
Question 10
Which ID store requires that a shadow user be created on Cisco ISE for the admin login to work?
- RSA SecureID
- Internal Database
- Active Directory
- LDAP
Correct answer: C
