350-701 practice questions 521–530

1. Question 521 · 654 in bank

   Which form of attack is launched using botnets?

   • ATCP flood
   • BDDOS
   • CDOS
   • Dvirus

   Show answer

   Answer: B

   Explanation

   B. DDOS A Distributed Denial of Service (DDOS) attack is a type of cyber attack in which multiple systems, often compromised through malware and controlled remotely by attackers, known as "botnets", flood the target website or network with a huge amount of traffic in order to overload the system and make it unavailable for legitimate users. The large number of systems participating in the attack amplifies the volume of traffic, making it very difficult for the targeted website or network to handle, resulting in a denial of service. Botnets are commonly used to launch DDoS attacks as they allow attackers to launch a much larger attack than they would be able to accomplish with a single system.

   Source: Adapted from community discussion — sull3y

   Next question

2. Question 522 · 654 in bank

   Which algorithm provides asymmetric encryption?

   • A3DES
   • BRC4
   • CAES
   • DRSA

   Show answer

   Answer: D

   Explanation

   D. RSA RSA is an algorithm that provides asymmetric encryption, which means that it uses a pair of keys, one for encryption and one for decryption. Data is encrypted with the public key and can only be decrypted with the corresponding private key. RSA is widely used in various applications, such as digital signatures, software protection, and secure communications. 3DES, RC4, and AES are symmetric encryption algorithms which means they use the same key for encryption and decryption. 3DES is a symmetric-key block cipher that applies the Data Encryption Standard (DES) algorithm three times to each data block. RC4 is a symmetric stream cipher, it's known for its simplicity and speed AES is a symmetric block cipher that supports key sizes of 128, 192, and 256 bits.

   Source: Adapted from community discussion — sull3y

   References

   • Cisco documentation

   Next question

3. Question 523 · 654 in bank

   A network administrator is setting up Cisco FMC to send logs to Cisco Security Analytics and Logging (SaaS). The network administrator is anticipating a high volume of logging events from the firewalls and wants to limit the strain on firewall resources. Which method must the administrator use to send these logs to Cisco Security Analytics and Logging?

   • Adirect connection using SNMP traps
   • BHTTP POST using the Security Analytics FMC plugin
   • Csyslog using the Secure Event Connector
   • DSFTP using the FMC CLI

   Show answer

   Answer: C

   Explanation

   The Secure Event Connector (SEC) is a component of the Security Analytics and Logging SaaS solution. It receives events from ASA , and FDM-managed devices and forwards them to the Cisco cloud.

   Source: Adapted from community discussion — dfb0b7d

   Next question

4. Question 524 · 654 in bank

   

   Refer to the exhibit. An administrator is configuring a VPN tunnel on a Cisco router. The information provided by the administrator of the remote end of the VPN tunnel was that IKEv1 is the tunnel protocol with a preshared key of C1$c0463835440!. The encryption for both phases is AES and the hash for both phases is SHA-256. The source subnet is 10.10.10.x/24 and the destination subnet is 10.10.20.x/24. The local device cannot establish a VPN tunnel and the debug message shown here is seen in the log file. What must be verified to correct the configuration?

   • AEnsure that the IKE version is identical on both ends
   • BEnsure that the ISAKMP policy configuration is identical on both ends
   • CEnsure that the preshared key is identical on both ends
   • DEnsure that the ACLs that define interesting traffic are symmetrical on both ends

   Show answer

   Answer: D

   Explanation

   Proxy Identities Not Supported This message appears in debugs if the access list for IPsec traffic does not match. 1d00h: IPSec(validate_transform_proposal): proxy identities not supported 1d00h: ISAKMP: IPSec policy invalidated proposal 1d00h: ISAKMP (0:2): SA not acceptable! The access lists on each peer need to mirror each other (all entries need to be reversible). This example illustrates this point. Peer A access-list 150 permit ip 172.21.113.0 0.0.0.255 172.21.114.0 0.0.0.255 access-list 150 permit ip host 10.2.0.8 host 172.21.114.123 Peer B access-list 150 permit ip 172.21.114.0 0.0.0.255 172.21.113.0 0.0.0.255 access-list 150 permit ip host 172.21.114.123 host 10.2.0.8 Source: https://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-negotiation-ike-protocols/5409-ipsec-debug-00.html

   Source: Adapted from community discussion — 97c291d

   References

   • Cisco documentation

   Next question

5. Question 525 · 654 in bank

   Which attack gives unauthorized access to files on the web server?

   • ADHCP snooping
   • Bpath traversal
   • Cbroadcast storm
   • Ddistributed DoS

   Show answer

   Answer: B

   Next question

6. Question 526 · 654 in bank

   Which feature does the IaaS model provide?

   • Asoftware-defined network segmentation
   • Bgranular control of data
   • Cautomatic updates and patching of software
   • Ddedicated, restricted workstations

   Show answer

   Answer: A

   Explanation

   I think he right answer is B: In the IaaS (Infrastructure as a Service) model, customers have significant control over their data and the deployed infrastructure. This includes responsibilities like managing and patching operating systems, virtual networks, and applications. As noted in the official Guide: "In an IaaS environment, the CSP (Cloud Service Provider) is responsible only for patching the hypervisors, physical compute and storage servers, and the physical network. You are responsible for patching the applications, operating systems (VMs), and any virtual networks you deploy"

   Source: Adapted from community discussion — ton99

   Next question

7. Question 527 · 654 in bank

   A network administrator needs a solution to match traffic and allow or deny the traffic based on the type of application, not just the source or destination address and port used. Which kind of security product must the network administrator implement to meet this requirement?

   • Anextgeneration firewall
   • Bweb application firewall
   • Cnext generation intrusion prevention system
   • Dintrusion detection system

   Show answer

   Answer: A

   Next question

8. Question 528 · 654 in bank

   What is a benefit of using Cisco CWS compared to an on-premises Cisco Secure Web Appliance?

   • ACWS eliminates the need to backhaul traffic through headquarters for remote workers whereas Secure Web Appliance does not.
   • BContent scanning for SAAS cloud applications is available through CWS and not available through Secure Web Appliance.
   • CCWS minimizes the load on the internal network and security infrastructure as compared to Secure Web Appliance.
   • DURL categories are updated more frequently on CWS than they are on Secure Web Appliance.

   Show answer

   Answer: C

   Next question

9. Question 529 · 654 in bank

   Which key feature of Cisco ZFW is unique among other Cisco IOS firewall solutions?

   • ASSL inspection
   • Bsecurity levels
   • Cstateless inspection
   • Dsecurity zones

   Show answer

   Answer: D

   Next question

10. Question 530 · 654 in bank

    Which Cisco solution secures the cloud users, data and applications with the cloud-native CASB and cloud cybersecurity platform?

    • ACisco Appdynamics
    • BCisco Umbrella
    • CCisco CloudLock
    • DCisco Secure Network Analytics

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-701 practice, question 521. 654 questions available.