350-701 VOL1

Question 1

A malicious entity has targeted the CFO of a corporation in an attempt to trick that person into
divulging internal corporate financial information. What of the following best describes the type
of attack that is being executed?

Answer 1

B. whaling

Question 2

Which of the following can be implemented to mitigate the risks associated with targeted
phishing attacks within a corporation? (Select three)

Answer 2

A. URL filtering
C. Regular user awareness training
E. implement an email and spam filtering appliance

Question 3

Brute force, man-in-the middle, and dictionary-based attacks can all be mitigated by
implementing which of the following technologies?

Answer 3

E. Multifactor authentication

Question 4

Which of the following statements are true regarding IKE main mode and aggressive mode?

Answer 4

B. Main mode uses 6 packets to establish the first phase of IKE, aggressive mode uses 3
packets.

Question 5

Which VPN technology is used for mobile users to connect from anywhere to corporate resources
without the need any client application to be installed?

Answer 5

C. SSL VPN

Question 6

Which Cisco based group researches and collects security related threats, published articles on
cybersecurity, and offers comprehensive threat intelligence?

Answer 6

A. Talos

Question 7

In Software Defined Networking (SDN), what is used to describe the API communication
between the SDN controller and the network elements (routers and switches) that it manages?

Answer 7

A. Southbound API

Question 8

You have configured a Cisco ASA device in multiple context modes. Which of the following are
true regarding multiple context implementations on an ASA? (Select two)

Answer 8

A. Only static routes are supported
D. The admin context is used to configure and administer the other contexts

Question 9

Which command was issued to generate this output?

Answer 9

C. show dot1x all summary

Question 10

Netflow version 9 has been implemented on a Cisco ASA. What are the valid NetFlow Secure
Event Logging (NSEL) Event ID’s (Select three)

Answer 10

B. Flow was denied
C. Flow was created
D. Flow was deleted

Question 11

Which of the following are the responsibility of the customer in a cloud-based Platform as a
Service (PaaS) offering? (Choose two)

Answer 11

A. Application
B. Data

Question 12

Which of the following are the responsibility of the customer in a cloud-based Software as a
Service (SaaS) offering?

Answer 12

D. None of the above

Question 13

Which of the following scenarios would most likely result in Company A choosing the deploy a
hybrid cloud model?

Answer 13

C. Company A is concerned about security, but understands that some data can leave their
network in order to increase efficiency.

Question 14

Which of the following are benefits of utilizing Application Programming Interfaces (APIs) in the
network? (Choose two)

Answer 14

A. Increased efficiency in network management through the use of automation.
B. Better integration with third party applications.

Question 15

How does Cisco Stealthwatch Enterprise receive telemetry data from endpoints?

Answer 15

C. flow data, including NetFlow, IPFIX, and sFlow

Question 16

A disgruntled employee has just left the company. Which of the following deployments is best
suited to secure the data within that employees BYOD device?

Answer 16

A. Mobile Device Management (MDM)

Question 17

How does Cisco Stealthwatch Cloud receive telemetry data from endpoints? (Select two)

Answer 17

B. VPC flow data from Amazaon We Services (AWS)
D. Flow data from Microsoft Azure

Question 18

What are two valid reasons for implementing retrospective security in a network? (Select two)

Answer 18

A. Find malware that was previously unidentified
D. Tracing the path that a file took over a period of time

Question 19

How does the Cisco Umbrella product offering determine the policy that should be applied for
inbound DNS requests?

Answer 19

D. Cisco Umbrella determines the policy based on the source IP address of the DNS request.

Question 20

Which of the following application layer preprocessor on the Cisco Firepower platform is
responsible for decoding and normalizing web-based requests sent using HTTP and the
associated responses received from web servers?

Answer 20

B. HTTP Inspect Preprocessor