350-701 practice questions 301–310

1. Question 301 · 654 in bank

   Select 2

   An administrator needs to configure the Cisco ASA via ASDM such that the network management system can actively monitor the host using SNMPv3. Which two tasks must be performed for this configuration? (Choose two.)

   • AAdd an SNMP USM entry.
   • BSpecify an SNMP user group.
   • CAdd an SNMP host access entry.
   • DSpecify the SNMP manager and UDP port.
   • ESpecify a community string.

   Show answer

   Answer: AB

   Explanation

   i think its C and E Step 1 Choose Configuration > Device Management > Management Access > SNMP. By default, the SNMP server is enabled. Step 2 Click Add in the SNMP Management Stations pane. The Add SNMP Host Access Entry dialog box appears. Step 3 Choose the interface on which the SNMP host resides. Step 4 Enter the SNMP host IP address. Step 5 Enter the SNMP host UDP port, or keep the default, port 162. Step 6 Add the SNMP host community string. If no community string is specified for a management station, the value set in the Community String (default) field on the SNMP Management Stations pane is used. Step 7 Choose the SNMP version used by the SNMP host. Step 8 If you have selected SNMP Version 3 in the previous step, choose the name of a configured user. Step 9 To specify the method for communicating with this NMS, check either the Poll or Trap check box. Step 10 Click OK. The Add SNMP Host Access Entry dialog box closes. Step 11 Click Apply. The NMS is configured and changes are saved to the running configuration. For more information about SNMP Version 3 NMS tools, see the following URL:

   Source: Adapted from community discussion — Z3R0IT

   References

   • Cisco documentation
   • Cisco documentation

   Next question

2. Question 302 · 654 in bank

   Which group within Cisco writes and publishes a weekly newsletter to help cybersecurity professionals remain aware of the ongoing and most prevalent threats?

   • ATalos
   • BPSIRT
   • CSCIRT
   • DDEVNET

   Show answer

   Answer: A

   Explanation

   A. Talos is a group within Cisco that writes and publishes a weekly newsletter to help cybersecurity professionals remain aware of the ongoing and most prevalent threats. Talos is a Cisco's threat intelligence team that focuses on identifying and analyzing cyber threats, vulnerabilities, and incidents. They publish a weekly newsletter called the Talos Threat Intelligence Report, which provides information on the latest threats, vulnerabilities, and trends in the cyber security industry. The report also includes technical details and recommendations for mitigating the identified threats. The Talos Threat Intelligence Report is widely read by cybersecurity professionals and organizations worldwide, as it provides valuable information on the latest threats and vulnerabilities, which helps them to better protect their networks and systems.

   Source: Adapted from community discussion — sull3y

   References

   • cisco.com documentation

   Next question

3. Question 303 · 654 in bank

   How does a WCCP-configured router identify if the Cisco WSA is functional?

   • AIf an ICMP ping fails three consecutive times between a router and the WSA, traffic is no longer transmitted to the router.
   • BIf an ICMP ping fails three consecutive times between a router and the WSA, traffic is no longer transmitted to the WSA.
   • CThe WSA-sends a Here-I-Am message every 10 seconds, and the router acknowledges with an I-See-You message.
   • DThe router sends a Here-I-Am message every 10 seconds, and the WSA acknowledges with an I-See-You message.

   Show answer

   Answer: C

   Explanation

   When the WCCP service is active on a web cache server (WSA in this case), it periodically sends a WCCP HERE I AM broadcast or unicast message to the unit operating as a WCCP router. If the information received in this message matches what is expected, the WCCP router replies with a WCCP I SEE YOU message. C would be right answer here.

   Source: Adapted from community discussion — securekonspiracia

   References

   • Cisco documentation

   Next question

4. Question 304 · 654 in bank

   What is the recommendation in a zero-trust model before granting access to corporate applications and resources?

   • Ato disconnect from the network when inactive
   • Bto use multifactor authentication
   • Cto use a wired network, not wireless
   • Dto use strong passwords

   Show answer

   Answer: B

   Explanation

   The core point of the question is "before granting access". Omar Santos study guide says the below: Zero trust has been a buzzword in the cybersecurity industry for several years. The zero-trust concept assumes that no system or user will be “trusted” when requesting access to the corporate network, systems, and applications hosted on-premises or in the cloud. You must first verify their trustworthiness before granting access. To achieve that we must use MFA. The user must be authenticated first before being granted access.

   Source: Adapted from community discussion — Directly_Connected

   Next question

5. Question 305 · 654 in bank

   Which open source tool does Cisco use to create graphical visualizations of network telemetry on Cisco IOS XE devices?

   • AInfluxDB
   • BSNMP
   • CGrafana
   • DSplunk

   Show answer

   Answer: C

   Explanation

   Reference: https://blogs.cisco.com/developer/getting-started-with-model-driven-telemetry

   Next question

6. Question 306 · 654 in bank

   Which CLI command is used to enable URL filtering support for shortened URLs on the Cisco ESA?

   • Awebsecurityadvancedconfig
   • Bwebadvancedconfig
   • Cwebsecurityconfig
   • Doutbreakconfig

   Show answer

   Answer: A

   Explanation

   A is correct: Note: In the AsyncOS 11.1 for Email Security release, URL Filtering introduced support for shortened URLs. With the CLI command' websecurityadvancedconfig,' the shortener services could be seen and configured. This configuration option was updated in AsyncOS 13.5 for Email Security. After you upgrade to this release, all shortened URLs are expanded. There is no option to disable the expansion of shortened URLs. For this reason, Cisco recommends AsyncOS 13.5 for Email Security or newer to provide the latest protections for URL defense. Please see the "Protecting Against Malicious or Undesirable URLs" chapter in the user guide or online help and the CLI Reference Guide for AsyncOS for Cisco Email Security Appliance. Source: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118775-technote-esa-00.html

   Source: Adapted from community discussion — Edy79

   References

   • Cisco documentation
   • Cisco documentation

   Next question

7. Question 307 · 654 in bank

   What is a feature of NetFlow Secure Event Logging?

   • AIt exports only records that indicate significant events in a flow.
   • BIt supports v5 and v8 templates.
   • CIt delivers data records to NSEL collectors through NetFlow over TCP only.
   • DIt filters NSEL events based on the traffic and event type through RSVP.

   Show answer

   Answer: A

   Explanation

   Reference: https://www.cisco.com/c/en/us/td/docs/security/asa/asa91/asdm71/general/asdm_71_general_config/monitor_nsel.pdf

   Source: Adapted from community discussion — sull3y

   References

   • Cisco documentation

   Next question

8. Question 308 · 654 in bank

   A network engineer entered the snmp-server user asmith myv7 auth sha cisco priv aes 256 cisc0123456789 command and needs to send SNMP information to a host at 10.255.255.1. Which command achieves this goal?

   • Asnmp-server host inside 10.255.255.1 version 3 myv7
   • Bsnmp-server host inside 10.255.255.1 snmpv3 myv7
   • Csnmp-server host inside 10.255.255.1 version 3 asmith
   • Dsnmp-server host inside 10.255.255.1 snmpv3 asmith

   Show answer

   Answer: C

   Next question

9. Question 309 · 654 in bank

   Which standard is used to automate exchanging cyber threat information?

   • AMITRE
   • BTAXII
   • CIoC
   • DSTIX

   Show answer

   Answer: B

   Explanation

   TAXII is a standard for exchanging STIX content, while STIX is a language used for representing cyber threat intelligence information in a structured and standardized format.

   Source: Adapted from community discussion — achille5

   Next question

10. Question 310 · 654 in bank

    Which endpoint protection and detection feature performs correlation of telemetry, files, and intrusion events that are flagged as possible active breaches?

    • Aelastic search
    • Bfile trajectory
    • Cindication of compromise
    • Dretrospective detection

    Show answer

    Answer: C

    Explanation

    Reference: https://www.cisco.com/c/en/us/solutions/collateral/enterprise-networks/advanced-malware-protection/solution-overview-c22-734228.html

    Source: Adapted from community discussion — azertyu

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-701 practice, question 301. 654 questions available.