Implementing and Operating Cisco Security Core Technologies

Question 1

Which two methods are available in Cisco Secure Web Appliance to process client requests when configured in Transparent mode? (Choose two.)

A. WCCP

B. Browser settings

C. PAC files

D. PBR

E. WPAD

Correct Answer: A,D

Question 2

What is a difference between a DoS attack and a DDoS attack?

A. A DoS attack is where a computer is used to flood a server with TCP packets whereas a DDoS attack is where a computer is used to flood a server with UDP packets

B. A DoS attack is where a computer is used to flood a server with TCP and UDP packets whereas a DDoS attack is where multiple systems target a single system with a DoS attack

C. A DoS attack is where a computer is used to flood a server with TCP and UDP packets whereas a DDoS attack is where a computer is used to flood multiple servers that are distributed over a LAN

D. A DoS attack is where a computer is used to flood a server with UDP packets whereas a DDoS attack is where a computer is used to flood a server with TCP packets

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 3

An engineer must force an endpoint to re-authenticate an already authenticated session without disrupting the endpoint to apply a new or updated policy from ISE. Which CoA type achieves this goal?

A. CoA Session Query

B. CoA Terminate

C. CoA Reauth

D. Port Bounce

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 4

What is a difference between GETVPN and IPsec?

A. GETVPN is based on IKEv2 and does not support IKEv1

B. GETVPN provides key management and security association management

C. GETVPN is used to build a VPN network with multiple sites without having to statically configure all devices

D. GETVPN reduces latency and provides encryption over MPLS without the use of a central hub

Correct Answer: A

Question 5

An organization is implementing URL blocking using Cisco Umbrella. The users are able to go to some sites but other sites are not accessible due to an error. Why is the error occurring?

A. IP-Layer Enforcement is not configured.

B. Intelligent proxy and SSL decryption is disabled in the policy.

C. Client computers do not have the Cisco Umbrella Root CA certificate installed.

D. Client computers do not have an SSL certificate deployed from an internal CA server.

Correct Answer: C

Question 6

An engineer adds a custom detection policy to a Cisco AMP deployment and encounters issues with the configuration. The simple detection mechanism is configured, but the dashboard indicates that the hash is not
64 characters and is non-zero. What is the issue?

A. The file being uploaded is incompatible with simple detections and must use advanced detections

B. The engineer is attempting to upload a hash created using MD5 instead of SHA-256

C. The hash being uploaded is part of a set in an incorrect format

D. The engineer is attempting to upload a file instead of a hash

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 7

What must be configured in Cisco ISE to enforce reauthentication of an endpoint session when an endpoint is deleted from an identity group?

A. SNMP probe

B. CoA

C. external identity source

D. posture assessment

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 8

A network engineer is configuring NetFlow top talkers on a Cisco router Drag and drop the steps in the process from the left into the sequence on the right

Correct Answer:

Question 9

An engineer is configuring device-hardening on a router in order to prevent credentials from being seen if the router configuration was compromised. Which command should be used?

A. service password-recovery

B. service password-encryption

C. username <username> privilege 15 password <password>

D. username < username> password <password>

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 10

What is the purpose of a NetFlow version 9 template record?

A. It provides a standardized set of information about an IP flow.

B. It serves as a unique identification number to distinguish individual data records

C. It specifies the data format of NetFlow processes.

D. lt defines the format of data records.

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 11

When choosing an algorithm to us, what should be considered about Diffie Hellman and RSA for key establishment?

A. RSA is a symmetric key establishment algorithm intended to output asymmetric keys

B. DH is a symmetric key establishment algorithm intended to output asymmetric keys

C. RSA is an asymmetric key establishment algorithm intended to output symmetric keys

D. DH is an asymmetric key establishment algorithm intended to output symmetric keys

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 12

What is the function of SDN southbound API protocols?

A. to allow for the dynamic configuration of control plane applications

B. to enable the controller to use REST

C. to allow for the static configuration of control plane applications

D. to enable the controller to make changes

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Cisco Implementing and Operating Cisco Security Core Technologies - 350-701 Exam Practice Test

Latest Update

Useful Links

Contact Us