350-701 practice questions 231–240

1. Question 231 · 654 in bank

   Which Cisco WSA feature supports access control using URL categories?

   • Atransparent user identification
   • BSOCKS proxy services
   • Cweb usage controls
   • Duser session restrictions

   Show answer

   Answer: C

   Explanation

   Should be C. Overview of Categorizing URL Transactions Using policy groups, you can create secure policies that control access to web sites containing questionable content. The sites that are blocked, allowed, or decrypted depend on the categories you select when setting up category blocking for each policy group. To control user access based on a URL category, you must enable Cisco Web Usage Controls. https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-7/user_guide/b_WSA_UserGuide_11_7/b_WSA_UserGuide_11_7_chapter_01001.html

   Source: Adapted from community discussion — testtaker13

   References

   • Cisco documentation

   Next question

2. Question 232 · 654 in bank

   Select 2

   Which two descriptions of AES encryption are true? (Choose two.)

   • AAES is less secure than 3DES.
   • BAES is more secure than 3DES.
   • CAES can use a 168-bit key for encryption.
   • DAES can use a 256-bit key for encryption.
   • EAES encrypts and decrypts a key three times in sequence.

   Show answer

   Answer: BD

   Explanation

   Reference: https://gpdb.docs.pivotal.io/43190/admin_guide/topics/ipsec.html

   Source: Adapted from community discussion — sull3y

   Next question

3. Question 233 · 654 in bank

   An engineer enabled SSL decryption for Cisco Umbrella intelligent proxy and needs to ensure that traffic is inspected without alerting end-users. Which action accomplishes this goal?

   • ARestrict access to only websites with trusted third-party signed certificates.
   • BModify the user's browser settings to suppress errors from Cisco Umbrella.
   • CUpload the organization root CA to Cisco Umbrella.
   • DInstall the Cisco Umbrella root CA onto the user's device.

   Show answer

   Answer: D

   Next question

4. Question 234 · 654 in bank

   What is the purpose of joining Cisco WSAs to an appliance group?

   • AAll WSAs in the group can view file analysis results.
   • BThe group supports improved redundancy
   • CIt supports cluster operations to expedite the malware analysis process.
   • DIt simplifies the task of patching multiple appliances.

   Show answer

   Answer: A

   Explanation

   "All WSAs in the group can view file analysis results" is also a valid function of joining Cisco WSAs to an appliance group. When WSAs are joined to a group, they can share information and data, including file analysis results, which can help improve overall security efficacy. However, it's worth noting that the primary purpose of joining WSAs to an appliance group is to support improved redundancy, as I mentioned earlier. So, both options A and B are correct answers, but B is the more commonly cited reason for joining WSAs to an appliance group.

   Source: Adapted from community discussion — loser4fun

   References

   • Cisco documentation
   • Cisco documentation

   Next question

5. Question 235 · 654 in bank

   Which technology should be used to help prevent an attacker from stealing usernames and passwords of users within an organization?

   • ARADIUS-based REAP
   • Bfingerprinting
   • CDynamic ARP Inspection
   • Dmultifactor authentication

   Show answer

   Answer: C

   Explanation

   B relates to OS detection D relates to mitigating unauthorised access and you'll likely already have the correct username and password i.e. it doesn't help prevent an attacker stealing credentials.

   Source: Adapted from community discussion — jku2cya

   Next question

6. Question 236 · 654 in bank

   Which solution for remote workers enables protection, detection, and response on the endpoint against known and unknown threats?

   • ACisco AMP for Endpoints
   • BCisco AnyConnect
   • CCisco Umbrella
   • DCisco Duo

   Show answer

   Answer: A

   Explanation

   It is asking about protection on the endpoint for remote workers. The other options aren't addressing protection on the endpoint. Anyconnect is the product suite Duo is MFA Umbrella protects against web/dns based threats.

   Source: Adapted from community discussion — unclemonkeyboy

   Next question

7. Question 237 · 654 in bank

   Select 2

   Which two actions does the Cisco Identity Services Engine posture module provide that ensures endpoint security? (Choose two.)

   • AAssignments to endpoint groups are made dynamically, based on endpoint attributes.
   • BEndpoint supplicant configuration is deployed.
   • CA centralized management solution is deployed.
   • DPatch management remediation is performed.
   • EThe latest antivirus updates are applied before access is allowed.

   Show answer

   Answer: DE

   Explanation

   ISE posture assessment includes a set of rules in a security policy that define a series of checks before an endpoint is granted access to the network. Posture assessment checks include the installation of OS patches, host based firewall, antivirus and anti-malware software, disk encryption and more, Answer is D & E

   Source: Adapted from community discussion — user18324

   Next question

8. Question 238 · 654 in bank

   What is an advantage of the Cisco Umbrella roaming client?

   • Athe ability to see all traffic without requiring TLS decryption
   • Bvisibility into IP-based threats by tunneling suspicious IP connections
   • Cthe ability to dynamically categorize traffic to previously uncategorized sites
   • Dvisibility into traffic that is destined to sites within the office environment

   Show answer

   Answer: B

   Explanation

   B resonates the most with this statement These clients protect users from connections to malicious destinations and command-and-control callbacks at the DNS and IP layers, no matter where the device connects to the internet. https://umbrella.cisco.com/blog/secure-remote-workers-with-the-cisco-umbrella-roaming-client#:~:text=By%20using%20the%20Umbrella%20roaming,devices%20with%20device%2Dlevel%20reporting.

   Source: Adapted from community discussion — jienBoq

   References

   • cisco.com documentation
   • cisco.com documentation
   • cisco.com documentation

   Next question

9. Question 239 · 654 in bank

   Which Cisco platform provides an agentless solution to provide visibility across the network including encrypted traffic analytics to detect malware in encrypted traffic without the need for decryption?

   • ACisco Advanced Malware Protection
   • BCisco Stealthwatch
   • CCisco Identity Services Engine
   • DCisco AnyConnect

   Show answer

   Answer: B

   Explanation

   Encrypted Traffic Analytics (ETA) "Cisco’s proprietary Encrypted Traffic Analytics (ETA) technology uses attributes like Initial Data Packet (IDP) to detect malware in encrypted traffic, without decrypting the data." https://blogs.cisco.com/security/saas-delivered-encrypted-traffic-analytics-with-cisco-stealthwatch-cloud

   Source: Adapted from community discussion — Felice44

   References

   • cisco.com documentation
   • cisco.com documentation

   Next question

10. Question 240 · 654 in bank

    What is a language format designed to exchange threat intelligence that can be transported over the TAXII protocol?

    • ASTIX
    • BXMPP
    • CpxGrid
    • DSMTP

    Show answer

    Answer: A

    Explanation

    Reference: https://www.cisco.com/c/en/us/td/docs/security/web_security/scancenter/administrator/guide/b_ScanCenter_Administrator_Guide/ b_ScanCenter_Administrator_Guide_chapter_0100011.pdf

    Source: Adapted from community discussion — sull3y

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-701 practice, question 231. 654 questions available.