350-701 practice questions 381–390

1. Question 381 · 654 in bank

   Which feature must be configured before implementing NetFlow on a router?

   • Asyslog
   • BIP routing
   • CVRF
   • DSNMPv3

   Show answer

   Answer: B

   Explanation

   Before implementing NetFlow on a router, IP routing must be configured. This is because NetFlow is an IP traffic monitoring technology that requires IP routing to be enabled and correctly configured to function properly. NetFlow can be used to analyze and monitor IP traffic, and it requires information on the network topology to do so effectively. While syslog, VRF, and SNMPv3 are all important features in network management and monitoring, they are not prerequisites for implementing NetFlow.

   Source: Adapted from community discussion — sull3y

   References

   • Cisco documentation

   Next question

2. Question 382 · 654 in bank

   An organization has two machines hosting web applications. Machine 1 is vulnerable to SQL injection while machine 2 is vulnerable to buffer overflows. What action would allow the attacker to gain access to machine 1 but not machine 2?

   • Asniffing the packets between the two hosts
   • Bsending continuous pings
   • Coverflowing the buffer's memory
   • Dinserting malicious commands into the database

   Show answer

   Answer: D

   Explanation

   D. inserting malicious commands into the database. SQL injection is a type of security vulnerability that allows an attacker to insert malicious code into an SQL statement, allowing them to gain unauthorized access to a database or manipulate its data. This can be done by exploiting vulnerabilities in the way that user input is handled by a web application. So by inserting malicious commands into the database hosted on Machine 1, an attacker can gain access to the database and potentially steal or manipulate data. On the other hand, a buffer overflow is a type of security vulnerability that occurs when more data is written to a buffer than it can hold. This can cause the program to crash or execute arbitrary code, allowing an attacker to gain control of the affected machine. However, in this scenario, Machine 2 is vulnerable to buffer overflows, so overflowing the buffer's memory on Machine 2 would allow the attacker to gain access to Machine 2 but not to Machine 1.

   Source: Adapted from community discussion — sull3y

   Next question

3. Question 383 · 654 in bank

   An engineer needs to detect and quarantine a file named abc123456789.zip based on the MD5 signature of the file using the Outbreak Control list feature within Cisco Advanced Malware Protection (AMP) for Endpoints. The configured detection method must work on files of unknown disposition. Which Outbreak Control list must be configured to provide this?

   • ASimple Custom Detection
   • BBlocked Application
   • CAdvanced Custom Detection
   • DAndroid Custom Detection

   Show answer

   Answer: C

   Explanation

   Advanced Custom Detections are like traditional antivirus signatures, but they are written by the user. These signatures can inspect various aspects of a file and have different signature formats. Some of the available signature formats are: • MD5 signatures • MD5, PE section-based signatures

   Source: Adapted from community discussion — azertyu

   Next question

4. Question 384 · 654 in bank

   Which Talos reputation center allows for tracking the reputation of IP addresses for email and web traffic?

   • AIP Block List Center
   • BIP and Domain Reputation Center
   • CCisco AMP Reputation Center
   • DFile Reputation Center

   Show answer

   Answer: B

   Next question

5. Question 385 · 654 in bank

   A switch with Dynamic ARP Inspection enabled has received a spoofed ARP response on a trusted interface. How does the switch behave in this situation?

   • AIt drops the packet after validation by using the IP & MAC Binding Table.
   • BIt forwards the packet without validation.
   • CIt forwards the packet after validation by using the IP & MAC Binding Table.
   • DIt drops the packet without validation.

   Show answer

   Answer: B

   Explanation

   sorry,the answer should be B..as per below Packets arriving on trusted interfaces bypass all DAI validation checks and are forwarded without validation by the switch

   Source: Adapted from community discussion — sull3y

   References

   • Cisco documentation

   Next question

6. Question 386 · 654 in bank

   DRAG DROP - A network engineer is configuring NetFlow top talkers on a Cisco router. Drag and drop the steps in the process from the left into the sequence on the right.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   I could prefer: Configure ip routing and enable Cisco Express Forwarding: Step 1 Configure the ip flow command on an interface: Step 2 Configure the ip flow-top-talkers command: Step 3 Specify the maximum number of top talkers: Step 4 Set the top-talkers sorting criterion: Step 5 https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/netflow/configuration/15-mt/nf-15-mt-book/cfg-nflow-top-talk.html

   Source: Adapted from community discussion — ums008

   References

   • Cisco documentation
   • Cisco documentation

   

   Next question

7. Question 387 · 654 in bank

   

   Refer to the exhibit. Which command results in these messages when attempting to troubleshoot an IPsec VPN connection?

   • Adebug crypto isakmp connection
   • Bdebug crypto ipsec
   • Cdebug crypto ipsec endpoint
   • Ddebug crypto isakmp

   Show answer

   Answer: D

   Explanation

   Anyone that knows Cisco VPNs that: debug crypto isakmp - relates to Phase 1 debug crypto ipsec - relates to Phase 2 These logs only show Phase 1 logs clearly indicating that the debugging of 'isakmp' is shown.

   Source: Adapted from community discussion — Totosos1

   References

   • Cisco documentation

   Next question

8. Question 388 · 654 in bank

   Which technology provides a combination of endpoint protection, endpoint detection, and response?

   • ACisco Threat Grid
   • BCisco Umbrella
   • CCisco Talos
   • DCisco AMP

   Show answer

   Answer: D

   Next question

9. Question 389 · 654 in bank

   DRAG DROP - Drag and drop the concepts from the left onto the descriptions on the right.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Looks good! guest services = sponsor portal Profiling = requires probes to collect attributes of connected endpoints posture assessment = results have a status of compliant or noncompliant BYOD = My Devices portal

   Source: Adapted from community discussion — jku2cya

   

   Next question

10. Question 390 · 654 in bank

    Which industry standard is used to integrate Cisco ISE and Cisco pxGrid to each other and with other interoperable security platforms?

    • ANIST
    • BANSI
    • CIETF
    • DIEEE

    Show answer

    Answer: C

    References

    • cisco.com documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-701 practice, question 381. 654 questions available.