350-701 practice questions 411–420

1. Question 411 · 654 in bank

   A network engineer has configured a NTP server on a Cisco ASA. The ASA has IP reachability to the NTP server and is not filtering any traffic. The show ntp association detail command indicates that the configured NTP server is unsynchronized and has a stratum of 16. What is the cause of this issue?

   • AAn access list entry for UDP port 123 on the outside interface is missing.
   • BResynchronization of NTP is not forced.
   • CNTP is not configured to use a working server.
   • DAn access list entry for UDP port 123 on the inside interface is missing.

   Show answer

   Answer: C

   Explanation

   ONNLY RANGE FORM 0-15 , 15 is meaning not usable time server. the higher number means worse. The NTP Stratum Model The NTP Stratum model is a representation of the hierarchy of time servers in an NTP network, where the Stratum level (0-15) indicates the device's distance to the reference clock. Stratum 0 means a device is directly connected to e.g., a GPS antenna. Stratum 0 devices cannot distribute time over a network directly, though, hence they must be linked to a Stratum 1 time server that will distribute time to Stratum 2 servers or clients, and so on. The higher the Stratum number, the more the timing accuracy and stability degrades. The NTP protocol does not allow clients to accept time from a Stratum 15 device, hence Stratum 15 is the lowest NTP Stratum. A group of NTP servers at the same Stratum level (Stratum 2, for example) are considered NTP Peers to each other. NTP Servers at a higher Stratum level, on the other hand, are referred to as NTP Servers.

   Source: Adapted from community discussion — amtf8888

   Next question

2. Question 412 · 654 in bank

   Which API method and required attribute are used to add a device into Cisco DNA Center with the native API?

   • AGET and serialNumber
   • BuserSudiSerlalNos and deviceInfo
   • CPOST and name
   • DlastSyncTime and pid

   Show answer

   Answer: C

   Explanation

   C. To add a device into Cisco DNA Center with the native API, the API method used is POST which creates a new resource. One of the required attribute to add a device is the "name" attribute, which is used to specify the name of the device being added. The device name should be unique and it's used to identify the device within the Cisco DNA Center platform. A GET request is used to retrieve information from a resource. "SerialNumber" and "userSudiSerialNos" are attributes used to identify a device but they are not required to add a device into Cisco DNA Center, they are needed to retrieve a specific device information. "lastSyncTime" is an attribute used to indicate when the device last synced with Cisco DNA Center, it's not required to add a device. "pid" is an attribute used to identify a device's product ID, and it's not required to add a device.

   Source: Adapted from community discussion — sull3y

   References

   • cisco.com documentation
   • cisco.com documentation
   • cisco.com documentation

   Next question

3. Question 413 · 654 in bank

   An engineer must deploy a network security management solution to provide the operations team with a unified view of the security environment. The company operates a hybrid cloud with an element of on-premises private hosting for critical applications and data. The operations team requires a single solution that will be used to manage and configure: • Firewalls • Intrusion Prevention System • Application control • URL filtering • Advanced malware protection Which Cisco solution must be deployed?

   • ASecure Firewall Threat Defense
   • BAdaptive Security Device Manager
   • CNext-Generation Firewall
   • DSecure Firewall Management Center

   Show answer

   Answer: D

   Explanation

   All listed features or modules can be integrated with FTD, which then can be managed from FMC (single pane of glass management).

   Source: Adapted from community discussion — Premium_Pils

   Next question

4. Question 414 · 654 in bank

   What is the purpose of the Cisco Endpoint IoC feature?

   • AIt is an incident response tool.
   • BIt provides stealth threat prevention.
   • CIt is a signature-based engine.
   • DIt provides precompromise detection.

   Show answer

   Answer: A

   Explanation

   The Endpoint Indication of Compromise (IOC) feature is a powerful incident response tool for scanning of post-compromise indicators across multiple computers.

   Source: Adapted from community discussion — Net4dd

   References

   • cisco.com documentation

   Next question

5. Question 415 · 654 in bank

   What is the difference between Cross-site Scripting and SQL Injection attacks?

   • ACross-site Scripting is when executives in a corporation are attacked, whereas SQL Injection is when a database is manipulated.
   • BCross-site Scripting is an attack where code is executed from the server side, whereas SQL Injection is an attack where code is executed from the client side.
   • CCross-site Scripting is a brute force attack targeting remote sites, whereas SQL Injection is a social engineering attack.
   • DCross-site Scripting is an attack where code is injected into a database, whereas SQL Injection is an attack where code is injected into a browser.

   Show answer

   Answer: B

   Explanation

   Cross-site Scripting is an attack where code is executed from the server side, whereas SQL Injection is an attack where code is executed from the client side.

   Source: Adapted from community discussion — jaciro11

   Next question

6. Question 416 · 654 in bank

   What is a benefit of flexible NetFlow records?

   • AThey have customized traffic identification.
   • BThey are used for accounting.
   • CThey are used for security.
   • DThey monitor a packet from Layer 2 to Layer 5.

   Show answer

   Answer: A

   Explanation

   Voting A here. Copied and pasted from the same link that's provided in this discussion: Key Advantages to using Flexible NetFlow: **Point 4** - "User configurable flow information to perform customized traffic identification and the ability to focus and monitor specific network behavior."

   Source: Adapted from community discussion — Tthurston1

   References

   • Cisco documentation

   Next question

7. Question 417 · 654 in bank

   DRAG DROP - Drag and drop the Cisco CWS redirection options from the left onto the capabilities on the right.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   With location-independent, the CWS connector can be installed on ISRs that are located in branch offices, data centers, or other remote locations. This allows organizations to implement web security policies and protect against web-based threats, regardless of where their users are located. Bandwidth efficient option, CWS Connector uses a technique called "reverse proxy" to offload web traffic from the ISR and forward it to the CWS service for inspection. The CWS service then returns the traffic to the ISR, which forwards it to the destination. This technique reduces the amount of web traffic that needs to be handled by the ISR, which helps to conserve bandwidth. In summary, CWS Connector installed on ISRs, in conjunction with the CWS service, provides location-independent and bandwidth-efficient option for web security.

   Source: Adapted from community discussion — sull3y

   References

   • Cisco documentation

   

   Next question

8. Question 418 · 654 in bank

   Which cryptographic process provides origin confidentiality, integrity, and origin authentication for packets?

   • AAH
   • BIKEv1
   • CIKEv2
   • DESP

   Show answer

   Answer: D

   Next question

9. Question 419 · 654 in bank

   Select 2

   What are two security benefits of an MDM deployment? (Choose two.)

   • Adistributed dashboard
   • Bdistributed software upgrade
   • Cprivacy control checks
   • Don-device content management
   • Erobust security policy enforcement

   Show answer

   Answer: DE

   Next question

10. Question 420 · 654 in bank

    Which Cisco security solution stops exfiltration using HTTPS?

    • ACisco CTA
    • BCisco FTD
    • CCisco AnyConnect
    • DCisco ASA

    Show answer

    Answer: A

    Explanation

    The Cisco security solution that stops exfiltration using HTTPS is A. Cisco CTA (Cisco Cloud Threat Analytics). Cisco CTA is a cloud-based security solution that provides visibility into network traffic, allowing it to identify and stop threats, including those using HTTPS for exfiltration. By analyzing network traffic patterns, Cisco CTA can detect and alert on anomalies that may indicate a threat, and take action to block malicious traffic.

    Source: Adapted from community discussion — sull3y

    References

    • cisco.com documentation
    • Cisco documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-701 practice, question 411. 654 questions available.