350-701 practice questions 251–260

1. Question 251 · 654 in bank

   Select 2

   Which two parameters are used for device compliance checks? (Choose two.)

   • Aendpoint protection software version
   • BWindows registry values
   • CDHCP snooping checks
   • DDNS integrity checks
   • Edevice operating system version

   Show answer

   Answer: BE

   Explanation

   The answer is BE. From work experience. Also see link below. Checking EPP version is not an option or parameter for device compliance checks. Registry files and operating system version are parameters you can choose for your compliance checks. https://www.cisco.com/c/en/us/td/docs/security/ise/3-1/admin_guide/b_ise_admin_3_1/b_ISE_admin_31_compliance.html#id_16997

   Source: Adapted from community discussion — west33637

   References

   • Cisco documentation
   • Cisco documentation
   • cisco.com documentation
   • Cisco documentation

   Next question

2. Question 252 · 654 in bank

   Which Cisco cloud security software centrally manages policies on multiple platforms such as Cisco ASA, Cisco Firepower, Cisco Meraki, and AWS?

   • ACisco Defense Orchestrator
   • BCisco Configuration Professional
   • CCisco Secureworks
   • DCisco DNAC

   Show answer

   Answer: A

   Explanation

   Key features Unify security policy and objects Manage security policy consistently across Cisco Adaptive Security Appliance (ASA), Cisco Firepower, Meraki MX, and Amazon Web Services (AWS) from a centralised console. https://www.cisco.com/c/en_uk/products/security/defense-orchestrator/index.html#~benefits

   Source: Adapted from community discussion — cyberwhizzy0

   References

   • Cisco documentation

   Next question

3. Question 253 · 654 in bank

   Which Cisco security solution determines if an endpoint has the latest OS updates and patches installed on the system?

   • ACisco Endpoint Security Analytics
   • BCisco AMP for Endpoints
   • CEndpoint Compliance Scanner
   • DSecurity Posture Assessment Service

   Show answer

   Answer: D

   Explanation

   I'd go for A. CESA is for endpoint analytics (and has asset OS inventory listed as a feature) https://www.cisco.com/c/en/us/products/collateral/security/endpoint-security-analytics-built-on-splunk/at-a-glance-c45-742564.html not D. its a service done by cisco engineers, more of an audit for a client's network done by cisco https://www.cisco.com/c/dam/en_us/about/doing_business/legal/service_descriptions/docs/Security_Posture_Assessment_SPA_Support.pdf

   Source: Adapted from community discussion — ntdevera

   References

   • Cisco documentation
   • Cisco documentation

   Next question

4. Question 254 · 654 in bank

   Which open standard creates a framework for sharing threat intelligence in a machine-digestible format?

   • AOpenIOC
   • BOpenC2
   • CCybOX
   • DSTIX

   Show answer

   Answer: A

   Explanation

   D. STIX (Structured Threat Information eXpression) is an open standard that creates a framework for sharing threat intelligence in a machine-digestible format. It enables organizations to share cyber threat intelligence, including information on adversaries, malware, vulnerabilities, and attack patterns, in a structured and consistent way. OpenIOC (Open Indicator of Compromise) is an open-source framework for representing threat intelligence in a machine-readable format. It is used to describe the characteristics of malware, intrusion attempts, and other malicious activity in a way that can be easily understood and acted upon by security systems and tools.

   Source: Adapted from community discussion — Net4dd

   Next question

5. Question 255 · 654 in bank

   What is a difference between Cisco AMP for Endpoints and Cisco Umbrella?

   • ACisco AMP for Endpoints is a cloud-based service, and Cisco Umbrella is not
   • BCisco AMP for Endpoints automatically researches indicators of compromise and confirms threats and Cisco Umbrella does not
   • CCisco AMP for Endpoints prevents, detects, and responds to attacks before damage can be done, and Cisco Umbrella provides the first line of defense against Internet threats
   • DCisco AMP for Endpoints prevents connections to malicious destinations, and Cisco Umbrella works at the file level to prevent the initial execution of malware

   Show answer

   Answer: C

   Explanation

   Got to know that blog related marketing material! Yet another one I would have got wrong, as I would have chosen B. I don't think that makes me a worse engineer.. Umbrella: https://blogs.cisco.com/networking/cisco-umbrella-wlan-your-first-line-of-defense-on-enterprise-network Cisco AMP: https://blogs.cisco.com/security/prevent-detect-and-respond-with-cisco-amp-for-endpoints

   Source: Adapted from community discussion — jku2cya

   References

   • cisco.com documentation
   • cisco.com documentation

   Next question

6. Question 256 · 654 in bank

   Select 2

   What are two functionalities of northbound and southbound APIs within Cisco SDN architecture? (Choose two.)

   • ANorthbound APIs utilize RESTful API methods such as GET, POST, and DELETE
   • BSouthbound APIs utilize CLI, SNMP, and RESTCONF
   • CSouthbound APIs are used to define how SDN controllers integrate with applications
   • DNorthbound interfaces utilize OpenFlow and OpFlex to integrate with network devices
   • ESouthbound interfaces utilize device configurations such as VLANs and IP addresses

   Show answer

   Answer: AB

   Explanation

   The northbound APIs on an SDN controller enable applications and orchestration systems to program the network and request services from it. Southbound interfaces are implemented with a Service Abstraction Layer (SAL) Which speak to network devices using SNMP and CLI (Command Line Interface) of the elements that make up the network. The main functions of SAL are: + Expose device services and capabilities to apps + Determine how to fulfill requested service irrespective of the underlying protocol Note: + An API is a method for one application (program) to exchange data with another application. + Interface here refers to the “software interface”, not the physical interfaces.

   Source: Adapted from community discussion — c946f3e

   References

   • Cisco documentation

   Next question

7. Question 257 · 654 in bank

   

   Refer to the exhibit. What is the function of the Python script code snippet for the Cisco ASA REST API?

   • Achanges the hostname of the Cisco ASA
   • Badds a global rule into policies
   • Cdeletes a global rule from policies
   • Dobtains the saved configuration of the Cisco ASA firewall

   Show answer

   Answer: B

   Next question

8. Question 258 · 654 in bank

   DRAG DROP - Drag and drop the features of Cisco ASA with Firepower from the left onto the benefits on the right. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://www.cisco.com/c/dam/global/en_ca/assets/pdf/cisco_asa_with_firepower_services_ds.pdf

   Source: Adapted from community discussion — ddev3737

   References

   • Cisco documentation

   

   Next question

9. Question 259 · 654 in bank

   Select 2

   What are two functions of secret key cryptography? (Choose two.)

   • Autilization of less memory
   • Butilization of large prime number iterations
   • Cutilization of different keys for encryption and decryption
   • Dkey selection without integer factorization
   • Eprovides the capability to only know the key on one side

   Show answer

   Answer: AD

   Explanation

   It is A and D. This question is talking about symmetric key exchange. Symmetrical key exchange uses less memory ( compared to asymmetrical, that uses integer factorization) and does not use integer factorization

   Source: Adapted from community discussion — Initial14

   Next question

10. Question 260 · 654 in bank

    

    Refer to the exhibit. When creating an access rule for URL filtering a network engineer adds certain categories and individual URLs to block. What is the result of the configuration?

    • AOnly URLs for botnets with a reputation score of 3 will be allowed while the rest will be blocked.
    • BOnly URLs for botnets with reputation scores of 1-3 will be blocked.
    • COnly URLs for botnets with reputation scores of 3-5 will be blocked.
    • DOnly URLs for botnets with a reputation score of 3 will be blocked.

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-701 practice, question 251. 654 questions available.