Question 471 · 654 in bank
Select 2Which two authentication protocols are supported by the Cisco WSA? (Choose two.)
Show answer
Answer: BE
350-701ProfessionalCiscoAll questions freePage 48 of 66
350-701 practice questions 471–480
Implementing and Operating Cisco Security Core Technologies (SCOR)654 questions across 66 pages are complete and free, with no account or card.
Official study references
654 questions in this bank
Free access · progress saved on this device
Question 472 · 654 in bank
Which metric is used by the monitoring agent to collect and output packet loss and jitter information?
Show answer
Answer: A
Explanation
RTP is a protocol used for the transport of real-time audio and video data over IP networks. It is commonly used in applications such as VoIP (Voice over IP) and video conferencing. RTP includes mechanisms for measuring and reporting on the quality of the transported media, including metrics such as packet loss and jitter.
Source: Adapted from community discussion — batbout
Question 473 · 654 in bank
DRAG DROP - Drag and drop the VPN functions from the left onto the descriptions on the right.
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Show the answer figure
Answer: See figure below
Question 474 · 654 in bank
Which direction do attackers encode data in DNS requests during exfiltration using DNS tunneling?
Show answer
Answer: A
Question 475 · 654 in bank
Which Cisco Firewall solution requires zone definition?
Show answer
Answer: C
Explanation
It's C. In ZBFW deployments a zone must be configured before interfaces can be assigned to the zone. In addition, an interface can be assigned to only one security zone. All traffic to and from a given interface in a device with ZBFW configured is implicitly blocked when the interface is assigned to a zone, except traffic to and from other interfaces in the same zone as well as traffic to any interface on the router (that is, the self-zone). IP traffic is implicitly allowed to flow by default among interfaces that are members of the same zone. When you configure ZBFW, in order to permit traffic to and from a zone member interface, a policy allowing or inspecting traffic must be configured between that zone and any other zone
Source: Adapted from community discussion — Kromwall
Question 476 · 654 in bank
Which firewall deployment mode allows inspection of traffic between servers in the same IP subnet?
Show answer
Answer: D
Question 477 · 654 in bank
Select 2What are two functionalities of SDN southbound APIs? (Choose two.)
Show answer
Answer: CD
Question 478 · 654 in bank
When MAB is configured for use within the 802.1X environment, an administrator must create a policy that allows the devices onto the network. Which information is used for the username and password?
Show answer
Answer: C
Explanation
Given Answer C is correct. A MAC Authentication Bypass (MAB) operation involves authentication using RADIUS Access-Request packets with both the username and password attributes. By default, the username and the password values are the same and contain the MAC address. The Configurable MAB Username and Password feature enables you to configure both the username and the password attributes in the following scenarios: https://content.cisco.com/chapter.sjs?uri=/searchable/chapter/content/en/us/td/docs/ios-xml/ios/sec_usr_aaa/configuration/15-e/sec-usr-aaa-15-e-book/sec-usr-config-mab-usrname-pwd.html.xml
Source: Adapted from community discussion — Kromwall
References
Question 479 · 654 in bank
Select 2Which two VPN tunneling protocols support the use of IPsec to provide data integrity, authentication, and data encryption? (Choose two.)
Show answer
Answer: CD
Explanation
L2F, L2TP, GRE, and MPLS VPNs do not provide data integrity, authentication, and data encryption. On the other hand, you can combine L2TP, GRE, and MPLS with IPsec to provide these benefits. (source: Official Cert Guide to SCOR 350-701 from Omar Santos)
Source: Adapted from community discussion — MPoels
Question 480 · 654 in bank
Which method is used to deploy certificates and configure the supplicant on mobile devices to gain access to network resources?
Show answer
Answer: A
Explanation
A- is correct answer: https://community.cisco.com/t5/security-knowledge-base/cisco-ise-byod-prescriptive-deployment-guide/ta-p/3641867#toc-hId-748642240 Endpoint Onboarding When leveraging ISE for BYOD, there are few actions that the endpoint needs to perform, which includes starting the communication with proper ISE node via the BYOD portal, creating digital certificate pairs, submitting certificate signing request, and configuring network profile. Some O/S has provisions for such functions natively while others require downloading and running an application temporarily to assist with the flow. Aside from Apple mobile devices (iOS), ISE leverages Network Setup Assistant (NSA or AKA Supplicant Provisioning Wizard (SPW)) to ease the BYOD flow for the users. NSA is an application that is downloaded to the endpoint either from the ISE itself or from app store for each of the endpoint types. NSA assists the user to generate certificate pair, install signed certificate, and configure network and proxy settings on the endpoint.
Source: Adapted from community discussion — Jessie45785
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
350-701 practice, question 471. 654 questions available.
About this question bank
Version 1.0.0. How we source questions