350-701 practice questions 481–490

1. Question 481 · 654 in bank

   DRAG DROP -

   

   Refer to the exhibit. An engineer must configure a Cisco switch to perform PPP authentication via a TACACS server located at IP address 10.1.1.10. Authentication must fall back to the local database using the username LocalUser and password C1$c0445915422! if TACACS server is unreachable. Drag and drop the commands from the left onto the corresponding configuration steps on the right.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

2. Question 482 · 654 in bank

   Which Cisco Umbrella package supports selective proxy for inspection of traffic from risky domains?

   • ADNS Security Advantage
   • BSIG Essentials
   • CDNS Security Essentials
   • DSIG Advantage

   Show answer

   Answer: A

   References

   • cisco.com documentation
   • cisco.com documentation
   • cisco.com documentation
   • cisco.com documentation

   Next question

3. Question 483 · 654 in bank

   Select 2

   What are the two distribution methods available to an administrator when performing a fresh rollout of the Cisco AnyConnect Secure Mobility Client? (Choose two.)

   • Aweb deploy
   • BSFTP
   • CTFTP
   • Dcloud update
   • Epredeploy

   Show answer

   Answer: AE

   Explanation

   https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect40/administration/guide/b_AnyConnect_Administrator_Guide_4-0/deploy-anyconnect.html#:~:text=Endpoint%20for%20AnyConnect-,Predeploying%20AnyConnect,-Web%20Deploying%20AnyConnect The Cisco AnyConnect Secure Mobility Client can be deployed to remote users by the following methods: Predeploy—New installations and upgrades are done either by the end user, or by using an enterprise software management system (SMS). Web Deploy—The AnyConnect package is loaded on the headend, which is either an ASA or FTD firewall, or an ISE server. When the user connects to a firewall or to ISE, AnyConnect is deployed to the client.

   Source: Adapted from community discussion — ffaiz

   References

   • Cisco documentation

   Next question

4. Question 484 · 654 in bank

   Which Cisco security solution integrates with cloud applications like Dropbox and Office 365 while protecting data from being exfiltrated?

   • ACisco Stealthwatch Cloud
   • BCisco Talos
   • CCisco Umbrella Investigate
   • DCisco Cloudlock

   Show answer

   Answer: D

   Explanation

   D. Cisco Cloudlock Cisco Cloudlock: Cisco Cloudlock is a cloud-native Cloud Access Security Broker (CASB) that helps secure your cloud applications, including popular platforms like Dropbox, Office 365, Google Drive, and Salesforce. It focuses on data protection, threat protection, and compliance by monitoring and controlling data in cloud applications, ensuring that sensitive data is not exfiltrated.

   Source: Adapted from community discussion — Mocix

   Next question

5. Question 485 · 654 in bank

   An engineer must configure Cisco AMP for Endpoints so that it contains a list of files that should not be executed by users. These files must not be quarantined. Which action meets this configuration requirement?

   • AModify the advanced custom detection list to include these files.
   • BAdd a list for simple custom detection.
   • CIdentify the network IPs and place them in a blocked list.
   • DCreate an application control blocked applications list.

   Show answer

   Answer: D

   Next question

6. Question 486 · 654 in bank

   Select 2

   What are two characteristics of the RESTful architecture used within Cisco DNA Center? (Choose two.)

   • AREST codes can be compiled with any programming language.
   • BREST uses HTTP to send a request to a web service.
   • CThe POST action replaces existing data at the URL path.
   • DREST uses methods such as GET, PUT, POST, and DELETE.
   • EREST is a Linux platform-based architecture.

   Show answer

   Answer: BD

   Next question

7. Question 487 · 654 in bank

   A security audit recently revealed that an administrator is using the same password of C1$c0448845217 for his personal account across multiple systems. What must be implemented by the company to reduce the chances of this happening again?

   • Acentralized user authentication
   • Brole based access control
   • Csecurity awareness training
   • Dstrict password policies

   Show answer

   Answer: C

   Explanation

   C correct - security awareness training - only possible. A - centalized dont prevent the use of same password B - Role base did not prevent passwords , just a authorization method D - strict Password policies did not prevent same password across multiples platform, just in one

   Source: Adapted from community discussion — XvidalX

   Next question

8. Question 488 · 654 in bank

   Which type of algorithm provides the highest level of protection against brute-force attacks?

   • APFS
   • BMD5
   • CHMAC
   • DSHA

   Show answer

   Answer: D

   Next question

9. Question 489 · 654 in bank

   When a site-to-site VPN is configured in Cisco FMC, which topology is supported when crypto ACLs are used instead of protected networks to define interesting traffic?

   • Ahub-and-spoke
   • Bfull mesh
   • CDMVPN
   • Dpoint-to-point

   Show answer

   Answer: D

   Explanation

   With Crypto ACL, there is no support for Hub, Spoke, and Full Mesh topologies; only point to point VPN is supported. https://www.cisco.com/c/en/us/td/docs/security/firepower/70/configuration/guide/fpmc-config-guide-v70/firepower_threat_defense_site_to_site_vpns.html

   Source: Adapted from community discussion — saeedzebel

   References

   • Cisco documentation

   Next question

10. Question 490 · 654 in bank

    Select 2

    For Cisco IOS PKI, which two types of servers are used as a distribution point for CRLs? (Choose two.)

    • Asubordinate CA
    • BHTTP
    • CSDP
    • DLDAP
    • ESCP

    Show answer

    Answer: BD

    References

    • Cisco documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-701 practice, question 481. 654 questions available.