350-701 VOL3

Question 1

How does Cisco Umbrella provide security without negatively impacting network latency or the
performance of endpoint?

Answer 1

A. Umbrella resolves DNS queries based on Cisco Talos global threat intelligence.

Question 2

Which of the following describe ways that a Cloud Access Security Broker (CASB) solution can
provide cloud application security without being involved in the actual data path? (Select two.)

Answer 2

A. CASB solutions provide logging and event data about the cloud application, as well as user
activity
B. CASB solutions leverage API calls between the broker and the cloud applications

Question 3

How does the Cisco Umbrella solution provide enterprise-wide security services in as little as a
few minutes?

Answer 3

B. By updating user configurations for DNS resolution endpoints will be immediately
protected using the default global protection policy.

Question 4

Which of the following describe benefits of the Cisco AMP product? (Select two)

Answer 4

A. AMP detects and tracks malware attacks and provides remediation support against these
persistent attacks.
D. AMP can control outbreaks in the network through the use of custom detection
capabilities.

Question 5

Which of the following application layer preprocessor on the Cisco Firepower platform is
responsible for decoding and normalizing web-based requests sent using HTTP and the
associated responses received from web servers?

Answer 5

B. HTTP Inspect Preprocessor

Question 6

Which of the following application layer preprocessor on the Cisco Firepower platform is used to
examine encrypted traffic to detect attempts to exploit the Heartbleed bug and to generate
events when dete4cted?

Answer 6

D. SSL Preprocessor

Question 7

Which of the following can be managed by the Cisco Firepower Management Center? (Select
three)

Answer 7

B. Cisco 7000 and 8000 series
C. ASA Firepower modules
D. NGIPSv devices

Question 8

You want to implement AAA on a Cisco router to centrally manage the authentication and
authorization controls. What is typically the first global command used to do this and is
mandatory?

Answer 8

A. aaa new-model

Question 9

Which of the following statements regarding the Cisco Firepower NGIPS in passive deployment
mode is true?

Answer 9

A. A switch port configured as a SPAN or mirror is needed

Question 10

Which of the following Cisco devices can be managed by Cisco Security Manager? (Select three

Answer 10

A. Cisco ASA 5500 series
D. Cisco IPS 4200 series
E. Cisco AnyConnect Secure Mobility Client

Question 11

Which of the following describes the Cisco next-generation NAC product that is used to manage
endpoints, users, and devices within a zero-trust architecture?

Answer 11

C. Cisco ISE

Question 12

Which of the following should be implemented to prevent ethernet interfaces from being
saturated by broadcast traffic?

Answer 12

D. Strom Control

Question 13

Which of the following features of the Cisco Firepower solution uses reputation intelligence to
block connections to or from IP addresses, URLs, and domain names?

Answer 13

B. Security Intelligence

Question 14

When you integrate a Cisco ISE to an existing Active Directory one of the prerequisites is that the
Cisco ISE sever and the Active Directory is synced using NTP. What is the maximum allowed time
difference between these two devices?

Answer 14

C. 5 minutes

Question 15

What else needs to be configured on router R1?

Answer 15

C. ntp server 10.100.100.1 key 5

Question 16

Which of the following statements are true regarding stateful and stateless packet filtering in a
Cisco ASA firepower?

Answer 16

B. Stateful packet filtering tracks communication settings in a state table.

Question 17

Which of the following terms is used to describe a software weakness that compromises its
functionality?

Answer 17

D. vulnerability

Question 18

Which of the following malware types is typically used to create back doors to give malicious
users access to a system?

Answer 18

C. Trojan Horse

Question 19

Which of the following is a technique that utilizes port 53 to exfiltrate data and can be used for
command-and-control callbacks?

Answer 19

B. DNS Tunneling

Question 20

What is the name of the Cisco branded Cloud Access Security Broker (CASB) product offering?

Answer 20

A. Cloudlock