350-701 practice questions 511–520

1. Question 511 · 654 in bank

   

   Refer to the exhibit. What does the Python script accomplish?

   • AIt authenticates to a Cisco ISE server using the username or ersad.
   • BIt lists the LDAP users from the external identity store configured on Cisco ISE.
   • CIt authenticates to a Cisco ISE with an SSH connection.
   • DIt allows authentication with TLSv1 SSL protocol.

   Show answer

   Answer: A

   Explanation

   i would go with "A" here because: - B cant be correct the GET is going after /ers/config/internaluser which is ISE own User DB - C cant be correct we we take a lookat the "context=" part we see the connection will be build by using the SSL Libary D cant be correct again if we look at the "context" part we see they take the TLSv1.2 from the ssl libary not TLSv1

   Source: Adapted from community discussion — zeroC00L

   References

   • cisco.com documentation

   Next question

2. Question 512 · 654 in bank

   Which file type is supported when performing a bulk upload of destinations into a destination list on Cisco Umbrella?

   • AXLS
   • BRTF
   • CTXT
   • DCSV

   Show answer

   Answer: D

   Explanation

   D is the correct answer. https://docs.umbrella.com/umbrella-user-guide/docs/bulk-upload-external-domains A .txt file will NEVER be as structured as a .csv file when it comes to bulk uploads....

   Source: Adapted from community discussion — Tthurston1

   Next question

3. Question 513 · 654 in bank

   Select 2

   Which two devices support WCCP for traffic redirection? (Choose two.)

   • ACisco IOS
   • BCisco Secure Web Appliance
   • CCisco IPS
   • Dproxy server
   • ECisco ASA

   Show answer

   Answer: BE

   Next question

4. Question 514 · 654 in bank

   What is a difference between GETVPN and IPsec?

   • AGETVPN is used to build a VPN network with multiple sites without having to statically configure all devices.
   • BGETVPN is based on IKEv2 and does not support IKEv1.
   • CGETVPN provides key management and security association management.
   • DGETVPN reduces latency and provides encryption over MPLS without the use of a central hub.

   Show answer

   Answer: D

   Explanation

   GETVPN Simplifies branch-to-branch instantaneous communications - Ensures low latency and jitter by enabling full-time, direct communications between sites, without requiring transport through a central hub Maximizes security - Provides encryption for MPLS networks while maintaining network intelligence such as full-mesh connectivity, natural routing path, and quality of service (QoS) Complies with governmental regulation and privacy laws - Helps you meet security compliance and internal regulation by encrypting all WAN traffic Offers management flexibility - Eliminates complex peer-to-peer key management with group encryption keys

   Source: Adapted from community discussion — Alee86

   References

   • Cisco documentation
   • cisco.com documentation
   • Cisco documentation

   Next question

5. Question 515 · 654 in bank

   Select 2

   Which two algorithms must be used when an engineer is creating a connection that will have classified data across it? (Choose two.)

   • ARSA-3072
   • BECDSA-256
   • CAES-256
   • DRC4
   • ESHA-384

   Show answer

   Answer: AC

   Next question

6. Question 516 · 654 in bank

   Which process is used to obtain a certificate from a CA?

   • Aenrollment
   • Bregistration
   • Capproval
   • Dsigning

   Show answer

   Answer: A

   Next question

7. Question 517 · 654 in bank

   Which method must be used to connect Cisco Secure Workload to external orchestrators at a client site when the client does not allow incoming connections?

   • Adestination NAT
   • Breverse tunnel
   • Csource NAT
   • DGRE tunnel

   Show answer

   Answer: B

   Next question

8. Question 518 · 654 in bank

   Select 2

   Which two methods are valid to be included in an authentication method list? (Choose two.)

   • Adefault
   • Blogin
   • Cconsole
   • Dline
   • Eenable

   Show answer

   Answer: DE

   References

   • Cisco documentation

   Next question

9. Question 519 · 654 in bank

   A network administrator is shipping a Cisco ASA to a remote retail site. The administrator wants to ensure that the device configuration cannot be accessed by someone at the site with physical access and a console cable. Which command must be used to mitigate this risk?

   • Aaaa authentication console
   • Bconfig-register 0x00000041
   • Cno service password-recovery
   • Dno service sw-reset-button

   Show answer

   Answer: C

   Next question

10. Question 520 · 654 in bank

    Select 2

    A Cisco Secure Cloud Analytics administrator is setting up a private network monitor sensor to monitor an on-premises environment. Which two pieces of information from the sensor are used to link to the Secure Cloud Analytics portal? (Choose two.)

    • Aprivate IP address
    • Bunique service key
    • CSSL certificate
    • Dpublic IP address
    • ENAT ID

    Show answer

    Answer: BD

    Explanation

    two critical pieces of information are required to link the ONA sensor to the Secure Cloud Analytics portal to add Unique Service Key / Public IP Address

    Source: Adapted from community discussion — Pierre_Bouvier

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-701 practice, question 511. 654 questions available.