350-701 practice questions 331–340

1. Question 331 · 654 in bank

   An organization has DHCP servers set up to allocate IP addresses to clients on the LAN. What must be done to ensure the LAN switches prevent malicious DHCP traffic while also distributing IP addresses to the correct endpoints?

   • AConfigure Dynamic ARP inspection and add entries in the DHCP snooping database.
   • BConfigure DHCP snooping and set trusted interfaces for all client connections.
   • CConfigure Dynamic ARP inspection and antispoofing ACLs in the DHCP snooping database.
   • DConfigure DHCP snooping and set a trusted interface for the DHCP server.

   Show answer

   Answer: D

   Explanation

   DHCP snooping acts like a firewall between untrusted hosts and DHCP servers. You use DHCP snooping to differentiate between untrusted interfaces connected to the end user and trusted interfaces connected to the DHCP server or another switch. Correct answer is D.

   Source: Adapted from community discussion — securekonspiracia

   Next question

2. Question 332 · 654 in bank

   What provides the ability to program and monitor networks from somewhere other than the DNAC GUI?

   • AASDM
   • BNetFlow
   • CAPI
   • Ddesktop client

   Show answer

   Answer: C

   Next question

3. Question 333 · 654 in bank

   What is the process of performing automated static and dynamic analysis of files in an isolated environment against preloaded behavioral indicators for threat analysis?

   • Aadvanced sandboxing
   • Badaptive scanning
   • Cdeep visibility scan
   • Dpoint-in-time checks

   Show answer

   Answer: A

   Next question

4. Question 334 · 654 in bank

   Select 2

   What are two benefits of Flexible NetFlow records? (Choose two.)

   • AThey provide accounting and billing enhancements.
   • BThey allow the user to configure flow information to perform customized traffic identification.
   • CThey provide monitoring of a wider range of IP packet information from Layer2 to 4.
   • DThey provide attack prevention by dropping the traffic.
   • EThey converge multiple accounting technologies into one accounting mechanism.

   Show answer

   Answer: BE

   Explanation

   https://www.cisco.com/c/en/us/products/ios-nx-os-software/flexible-netflow/index.html Cisco IOS Flexible NetFlow benefits: Flexibility and scalability of flow data beyond traditional NetFlow Customized traffic identification ( B ) Ability to focus and monitor specific network behavior Ability to monitor a wider range of packet information, producing new information about network behavior ( look like C ) Enhanced network anomaly and security detection Convergence of multiple accounting technologies into one accounting mechanism. ( E ) So its B,C,E

   Source: Adapted from community discussion — Moe1416

   References

   • Cisco documentation
   • Cisco documentation
   • cisco.com documentation
   • Cisco documentation
   • Cisco documentation

   Next question

5. Question 335 · 654 in bank

   An engineer needs to configure a Cisco Secure Email Gateway (SEG) to prompt users to enter multiple forms of identification before gaining access to the SEG. The SEG must also join a cluster using the preshared key of cisc421555367. What steps must be taken to support this?

   • AEnable two-factor authentication through a RADIUS server, and then join the cluster via the SEG GUI.
   • BEnable two-factor authentication through a TACACS+ server, and then join the cluster via the SEG CLI.
   • CEnable two-factor authentication through a RADIUS server, and then join the cluster via the SEG CLI
   • DEnable two-factor authentication through a TACACS+ server, and then join the cluster via the SEG GUI.

   Show answer

   Answer: C

   References

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   Next question

6. Question 336 · 654 in bank

   Which characteristic is unique to a Cisco WSAv as compared to a physical appliance?

   • Arequires an additional license
   • Bperforms transparent redirection
   • Csupports SSL decryption
   • Dsupports VMware vMotion on VMware ESXi

   Show answer

   Answer: A

   Explanation

   The Virtual Appliance License page 26 The Cisco Secure virtual appliance requires an additional license to run the virtual appliance on a host. You can use this license for multiple, cloned virtual appliances. Licenses are hypervisor-independent. https://www.cisco.com/c/dam/en/us/td/docs/security/content_security/virtual_appliances/Cisco_Content_Security_Virtual_Appliance_Install_Guide.pdf

   Source: Adapted from community discussion — eryxcs

   References

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   Next question

7. Question 337 · 654 in bank

   Select 2

   What are two workload security models? (Choose two.)

   • ASaaS
   • BPaaS
   • Coff-premises
   • Don-premises
   • EIaaS

   Show answer

   Answer: AD

   Explanation

   Deployment models and scale Cisco Secure Workload offers both Software-as-a-Service (SaaS) and on-premises options allowing customers to choose the model that meets their business needs. https://www.cisco.com/c/en/us/products/collateral/data-center-analytics/tetration-analytics/datasheet-c78-737256.html

   Source: Adapted from community discussion — cyberwhizzy0

   References

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   Next question

8. Question 338 · 654 in bank

   An engineer is configuring Dropbox integration with Cisco Cloudlock. Which action must be taken before granting API access in the Dropbox admin console?

   • AAdd Dropbox to the Cloudlock Authentication and API section in the Cloudlock portal.
   • BAdd Cloudlock to the Dropbox admin portal.
   • CSend an API request to Cloudlock from Dropbox admin portal.
   • DAuthorize Dropbox within the Platform settings in the Cloudlock portal.

   Show answer

   Answer: D

   Next question

9. Question 339 · 654 in bank

   What is a benefit of using GET VPN over FlexVPN within a VPN deployment?

   • AGET VPN supports Remote Access VPNs
   • BGET VPN uses multiple security associations for connections
   • CGET VPN natively supports MPLS and private IP networks.
   • DGET VPN interoperates with non-Cisco devices.

   Show answer

   Answer: C

   Next question

10. Question 340 · 654 in bank

    Email security has become a high-priority task for a security engineer at a large multi-national organization due to ongoing phishing campaigns. To help control this, the engineer has deployed an Incoming Content Filter with a URL reputation of (`"10.00 to `"6.00) on the Cisco ESA. Which action will the system perform to desirable any links in messages that match the filter?

    • ADefang
    • BFilterAction
    • CQuarantine
    • DScreenAction

    Show answer

    Answer: A

    Explanation

    This is an HTML part of the message Link1: http://malware.testing.google.test/testing/malware/ and some text Link2: CLICK ME some text Link3: http://malware.testing.google.test/testing/malware/ and some text Link4: http://cisco.com and some text the result of the defang action taken on the text/html part of the MIME message is a stripped A-tag and the tag content is left untouched. In the two first paragraphs, both links were defanged where the HTML code was stripped and the text part of the element was left. The URL address in the first paragraph is the one from the text part of the HTML element. It must be noted the URL address from the first paragraph is still visible after the defang action was taken but without the HTML A-tags, the element must not be clickable. The third paragraph is not defanged as the URL address here is not placed between any A-tags, and is not considered as a link.

    Source: Adapted from community discussion — LTLnetworker

    References

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-701 practice, question 331. 654 questions available.