350-701 practice questions 101–110

1. Question 101 · 654 in bank

   What is the primary role of the Cisco Email Security Appliance?

   • AMail Submission Agent
   • BMail Transfer Agent
   • CMail Delivery Agent
   • DMail User Agent

   Show answer

   Answer: B

   References

   • Cisco documentation

   Next question

2. Question 102 · 654 in bank

   Select 2

   Which two services must remain as on-premises equipment when a hybrid email solution is deployed? (Choose two.)

   • ADDoS
   • Bantispam
   • Cantivirus
   • Dencryption
   • EDLP

   Show answer

   Answer: DE

   Explanation

   Reference: https://www.cisco.com/c/dam/en/us/td/docs/security/ces/overview_guide/Cisco_Cloud_Hybrid_Email_Security_Overview_Guide.pdf

   Source: Adapted from community discussion — idto

   References

   • Cisco documentation

   Next question

3. Question 103 · 654 in bank

   An organization is receiving SPAM emails from a known malicious domain. What must be configured in order to prevent the session during the initial TCP communication?

   • AConfigure the Cisco ESA to reset the TCP connection.
   • BConfigure policies to stop and reject communication.
   • CConfigure the Cisco ESA to drop the malicious emails.
   • DConfigure policies to quarantine malicious emails.

   Show answer

   Answer: A

   Explanation

   "You can configure your Email Security Appliance (ESA) to restrict connections by adding any of these items to Sender Groups which use Mail Flow Policies: IP range Specific host or domain name SenderBase Reputation Service (SBRS) "organization" classification SBRS score range DNS List query response Each Mail Flow Policy has an access rule, such as ACCEPT, REJECT, RELAY, CONTINUE, and TCPREFUSE. A host that attempts to establish a connection to your ESA and matches a Sender Group using a TCPREFUSE access rule is not allowed to connect to your ESA." Source (2014): https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118007-configure-esa-00.html Newer (2021) - the same but TCPREFUSE is replaced by "TCP refuse": https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/216842-understand-parameters-related-to-mail-fl.html

   Source: Adapted from community discussion — NikoNiko

   References

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   Next question

4. Question 104 · 654 in bank

   

   Refer to the exhibit. What is a result of the configuration?

   • ATraffic from the DMZ network is redirected.
   • BTraffic from the inside network is redirected.
   • CAll TCP traffic is redirected.
   • DTraffic from the inside and DMZ networks is redirected.

   Show answer

   Answer: D

   Explanation

   The answer is definitly D. The ACL's match 192.168.100.0 to 192.168.100.255 and 172.16.0.0 to 172.16.255.255. The DMZ and inside network fall in those ranges.

   Source: Adapted from community discussion — LynenDutzow

   Next question

5. Question 105 · 654 in bank

   An organization received a large amount of SPAM messages over a short time period. In order to take action on the messages, it must be determined how harmful the messages are and this needs to happen dynamically. What must be configured to accomplish this?

   • AConfigure the Cisco WSA to modify policies based on the traffic seen.
   • BConfigure the Cisco ESA to modify policies based on the traffic seen.
   • CConfigure the Cisco WSA to receive real-time updates from Cisco Talos.
   • DConfigure the Cisco ESA to receive real-time updates from Cisco Talos.

   Show answer

   Answer: D

   Next question

6. Question 106 · 654 in bank

   Select 2

   What are two differences between a Cisco WSA that is running in transparent mode and one running in explicit mode? (Choose two.)

   • AThe Cisco WSA responds with its own IP address only if it is running in explicit mode.
   • BThe Cisco WSA is configured in a web browser only if it is running in transparent mode.
   • CThe Cisco WSA responds with its own IP address only if it is running in transparent mode.
   • DThe Cisco WSA uses a Layer 3 device to redirect traffic only if it is running in transparent mode.
   • EWhen the Cisco WSA is running in transparent mode, it uses the WSA's own IP address as the HTTP request destination.

   Show answer

   Answer: AD

   Explanation

   A and D are correct. - In explicit proxy mode, users are configured to use a web proxy and the web traffic is sent directly to the Cisco WSA. In contrast, in transparent proxy mode the Cisco WSA intercepts user's web traffic redirected from other network devices, such as switches, routers, or firewalls.

   Source: Adapted from community discussion — wfexco

   References

   • Cisco documentation

   Next question

7. Question 107 · 654 in bank

   Which technology is used to improve web traffic performance by proxy caching?

   • AWSA
   • BFirepower
   • CFireSIGHT
   • DASA

   Show answer

   Answer: A

   Next question

8. Question 108 · 654 in bank

   Which proxy mode must be used on Cisco WSA to redirect TCP traffic with WCCP?

   • Atransparent
   • Bredirection
   • Cforward
   • Dproxy gateway

   Show answer

   Answer: A

   Explanation

   How the WSA HTTP proxy obtains the client's request can be defined as one of two ways: Transparently or Explicitly. Deployment: Transparent Method: WCCP Description: A WCCP v2 enabled device (typically a router, switch, PIX, or ASA) redirects port 80 https://www.cisco.com/c/en/us/support/docs/security/web-security-appliance/117940-qa-wsa-00.html

   Source: Adapted from community discussion — cyberwhizzy0

   References

   • Cisco documentation

   Next question

9. Question 109 · 654 in bank

   Select 2

   Which two request methods of REST API are valid on the Cisco ASA Platform? (Choose two.)

   • Aput
   • Boptions
   • Cget
   • Dpush
   • Econnect

   Show answer

   Answer: AC

   Explanation

   ans is correct. Available request methods are: GET – Retrieves data from the specified object. PUT – Adds the supplied information to the specified object; returns a 404 Resource Not Found error if the object does not exist. POST – Creates the object with the supplied information. DELETE – Deletes the specified object. PATCH – Applies partial modifications to the specified object.

   Source: Adapted from community discussion — sajoz123

   References

   • Cisco documentation

   Next question

10. Question 110 · 654 in bank

    How does Cisco Advanced Phishing Protection protect users?

    • AIt utilizes sensors that send messages securely.
    • BIt uses machine learning and real-time behavior analytics.
    • CIt validates the sender by using DKIM.
    • DIt determines which identities are perceived by the sender.

    Show answer

    Answer: B

    Explanation

    Cisco® Advanced Phishing Protection provides sender authentication and BEC detection capabilities. It uses advance machine learning techniques, real time behavior analytics, relationship modeling and telemetry to protect against identity deception–based threats. answer should be B

    Source: Adapted from community discussion — SirFrates24

    References

    • Cisco documentation
    • Cisco documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-701 practice, question 101. 654 questions available.