350-701 practice questions 221–230

1. Question 221 · 654 in bank

   Select 2

   Which two key and block sizes are valid for AES? (Choose two.)

   • A64-bit block size, 112-bit key length
   • B64-bit block size, 168-bit key length
   • C128-bit block size, 192-bit key length
   • D128-bit block size, 256-bit key length
   • E192-bit block size, 256-bit key length

   Show answer

   Answer: CD

   Explanation

   Reference: https://en.wikipedia.org/wiki/Advanced_Encryption_Standard

   Source: Adapted from community discussion — sull3y

   Next question

2. Question 222 · 654 in bank

   Using Cisco Cognitive Threat Analytics, which platform automatically blocks risky sites, and test unknown sites for hidden advanced threats before allowing users to click them?

   • ACisco Identity Services Engine
   • BCisco Enterprise Security Appliance
   • CCisco Web Security Appliance
   • DCisco Advanced Stealthwatch Appliance

   Show answer

   Answer: C

   Next question

3. Question 223 · 654 in bank

   Select 2

   What are two things to consider when using PAC files with the Cisco WSA? (Choose two.)

   • AIf the WSA host port is changed, the default port redirects web traffic to the correct port automatically.
   • BPAC files use if-else statements to determine whether to use a proxy or a direct connection for traffic between the PC and the host.
   • CThe WSA hosts PAC files on port 9001 by default.
   • DThe WSA hosts PAC files on port 6001 by default.
   • EBy default, they direct traffic through a proxy when the PC and the host are on the same subnet.

   Show answer

   Answer: BC

   References

   • Cisco documentation

   Next question

4. Question 224 · 654 in bank

   Which IETF attribute is supported for the RADIUS CoA feature?

   • A24 State
   • B30 Calling-Station-ID
   • C42 Acct-Session-ID
   • D81 Message-Authenticator

   Show answer

   Answer: A

   Explanation

   table 1: Supported IETF Attributes Attribute Name - Attribute Number State - 24 Calling-Station-ID - 31 Acct-Session-ID - 44 Message-Authenticator - 80

   Source: Adapted from community discussion — Webster21

   References

   • Cisco documentation
   • Cisco documentation

   Next question

5. Question 225 · 654 in bank

   When a transparent authentication fails on the Web Security Appliance, which type of access does the end user get?

   • Aguest
   • Blimited Internet
   • Cblocked
   • Dfull Internet

   Show answer

   Answer: A

   Explanation

   I will go with A.guest If transparent authentication fails, you can configure how to handle the transaction: you can grant the user guest access, or you can force an authentication prompt to appear to the user. https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa_12-5/User-Guide/b_WSA_UserGuide_12_5/b_WSA_UserGuide_11_7_chapter_0101.html

   Source: Adapted from community discussion — leowulf

   References

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   Next question

6. Question 226 · 654 in bank

   Select 2

   What are two ways that Cisco Container Platform provides value to customers who utilize cloud service providers? (Choose two.)

   • AAllows developers to create code once and deploy to multiple clouds
   • Bhelps maintain source code for cloud deployments
   • Cmanages Docker containers
   • Dmanages Kubernetes clusters
   • ECreates complex tasks for managing code

   Show answer

   Answer: AD

   Explanation

   Answer is NONE - cause product does not exist anymore https://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/intersight/ccp-iks-eol.html , but yeah I would go for A and D

   Source: Adapted from community discussion — Jessie45785

   References

   • Cisco documentation
   • Cisco documentation

   Next question

7. Question 227 · 654 in bank

   DRAG DROP - Drag and drop the posture assessment flow actions from the left into a sequence on the right. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

8. Question 228 · 654 in bank

   

   Refer to the exhibit. What does the API key do while working with https://api.amp.cisco.com/v1/computers?

   • Adisplays client ID
   • BHTTP authorization
   • CImports requests
   • DHTTP authentication

   Show answer

   Answer: D

   Explanation

   When making API requests to https://api.amp.cisco.com/v1/computers, the API key serves as a form of HTTP authentication, allowing the user to access and manipulate data about the computers in their Cisco Advanced Malware Protection (AMP) environment. The API key is a unique code that is associated with the user's account and is used to authenticate API requests.

   Source: Adapted from community discussion — Tuxzinator

   References

   • cisco.com documentation
   • cisco.com documentation
   • Cisco documentation

   Next question

9. Question 229 · 654 in bank

   Which statement describes a serverless application?

   • AThe application delivery controller in front of the server farm designates on which server the application runs each time.
   • BThe application runs from an ephemeral, event-triggered, and stateless container that is fully managed by a cloud provider.
   • CThe application is installed on network equipment and not on physical servers.
   • DThe application runs from a containerized environment that is managed by Kubernetes or Docker Swarm.

   Show answer

   Answer: B

   Explanation

   B. A serverless application runs from an ephemeral, event-triggered, and stateless container that is fully managed by a cloud provider. A serverless application is a type of cloud computing architecture where the cloud provider manages the infrastructure and automatically allocates resources as needed to run the application. The application runs in an ephemeral container, which means that it can be started and stopped dynamically based on the event that triggers it. The container is stateless, meaning that it does not persist any data between executions, relying instead on external data storage. The cloud provider is responsible for managing the underlying infrastructure, including the provisioning of computing resources, load balancing, and security, allowing the developer to focus solely on writing the code for the application. This approach eliminates the need to manage servers and reduces the costs associated with maintaining a server infrastructure.

   Source: Adapted from community discussion — sull3y

   Next question

10. Question 230 · 654 in bank

    What is a description of microsegmentation?

    • AEnvironments deploy a container orchestration platform, such as Kubernetes, to manage the application delivery.
    • BEnvironments apply a zero-trust model and specify how applications on different servers or containers can communicate.
    • CEnvironments deploy centrally managed host-based firewall rules on each server or container.
    • DEnvironments implement private VLAN segmentation to group servers with similar applications.

    Show answer

    Answer: B

    Explanation

    Why is not B? Microsegmentation involves applying a zero-trust security model, where communication between different servers, containers, or workloads is strictly controlled and allowed only when explicitly defined. This is usually achieved by using network security policies and access controls to specify and limit the communication paths between individual applications or workloads. B. Environments apply a zero-trust model and specify how applications on different servers or containers can communicate.

    Source: Adapted from community discussion — ums008

    References

    • cisco.com documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-701 practice, question 221. 654 questions available.