350-701 practice questions 531–540

1. Question 531 · 654 in bank

   What is a difference between an XSS attack and an SQL injection attack?

   • ASQL injection is a hacking method used to attack SQL databases, whereas XSS attack can exist in many different types of applications.
   • BXSS attacks are used to steal information from databases, whereas SQL injection attacks are used to redirect users to websites where attackers can steal data from them.
   • CXSS is a hacking method used to attack SQL databases, whereas SQL injection attacks can exist in many different types of applications.
   • DSQL injection attacks are used to steal information from databases, whereas XSS attacks are used to redirect users to websites where attackers can steal data from them.

   Show answer

   Answer: D

   Explanation

   D. SQL injection attacks are used to steal information from databases, whereas XSS attacks are used to redirect users to websites where attackers can steal data from them. Cross-site scripting (XSS) is a type of security vulnerability that allows attackers to inject malicious code into a website, which can be executed by unsuspecting users when they visit the website. The malicious code can be used to steal information from the user's browser, such as login credentials or personal information. XSS attacks can exist in many different types of applications, including web-based applications, mobile apps, and even PDFs. SQL injection is a type of attack that targets SQL databases. The attacker injects malicious SQL code into a web application's input fields, which can be executed by the database. This can allow the attacker to steal sensitive information from the database, such as login credentials, credit card numbers, and other sensitive data. SQL injection attacks can exist in many different types of applications that use SQL databases, including web-based applications, mobile apps, and even PDFs.

   Source: Adapted from community discussion — sull3y

   Next question

2. Question 532 · 654 in bank

   Which IPsec mode must be used when encrypting data over a public network between two servers with RFC1918 IP addresses?

   • Amain mode
   • Baggressive mode
   • Ctransport mode
   • Dtunnel mode

   Show answer

   Answer: D

   Next question

3. Question 533 · 654 in bank

   Which platform uses Cyber Threat Intelligence as its main source of information?

   • AEPP
   • BEDR
   • CCisco ASA
   • DCisco Secure Endpoint

   Show answer

   Answer: D

   Next question

4. Question 534 · 654 in bank

   

   Refer to the exhibit. Which task is the Python script performing by using the Umbrella Enforcement API?

   • Aimporting malicious domains to Cisco Umbrella Enforcement for additional processing
   • Bimporting malicious domains to Cisco Umbrella Enforcement for blocking
   • Cediting malicious domains in Cisco Umbrella Enforcement that have changed status
   • Dediting malicious domains in Cisco Umbrella Enforcement that have changed IP address

   Show answer

   Answer: B

   Next question

5. Question 535 · 654 in bank

   Which security mechanism is designed to protect against “offline brute-force” attacks?

   • AToken
   • BMFA
   • CSalt
   • DCAPTCHA

   Show answer

   Answer: C

   Next question

6. Question 536 · 654 in bank

   What is the default action before identifying the URL during HTTPS inspection in Cisco Secure Firewall Threat Defense software?

   • Areset
   • Bbuffer
   • Cdrop
   • Dpass

   Show answer

   Answer: D

   Explanation

   For some features, including URL filtering, application detection, rate limiting, and Intelligent Application Bypass, a few packets must pass in order for the connection to be established, and to enable the system to identify the traffic and determine which access control rule (if any) will handle that traffic. https://docs.defenseorchestrator.com/cdfmc/r_best_practices_for_url_filtering.html#!c_the_default_intrusion_policy_2.html#ID-2194-0000001f

   Source: Adapted from community discussion — bfd04b6

   Next question

7. Question 537 · 654 in bank

   Which method is used on a Cisco IOS router to redirect traffic to the Cisco Secure Web Appliance for URL inspection?

   • AWCCP
   • Broute map
   • CPAC file
   • DWPAD

   Show answer

   Answer: A

   Next question

8. Question 538 · 654 in bank

   Select 2

   Which two global commands must the network administrator implement to limit the attack surface of an internet-facing Cisco router? (Choose two.)

   • Aservice tcp-keepalives-in
   • Bno service password-recovery
   • Cno cdp run
   • Dno ip http server
   • Eip ssh version 2

   Show answer

   Answer: CD

   Next question

9. Question 539 · 654 in bank

   What is a difference between a DoS attack and DDos attack?

   • AA DoS attack is where a computer is used to flood a server with TCP packets, whereas DDoS attack is where a computer is used to flood a server with UDP packets.
   • BA DoS attack is where a computer is used to flood a server with UDP packets, whereas DDoS attack is where a computer is used to flood a server with TCP packets.
   • CA DoS attack is where a computer is used to flood a server with TCP and UDP packets, whereas DDoS attack is where a computer is used to flood multiple servers that are distributed over a LAN.
   • DA DoS attack is where a computer is used to flood a server with TCP and UDP packets, whereas DDoS attack is where multiple systems target a single system with a DoS attack.

   Show answer

   Answer: D

   Explanation

   D. A DoS attack is where a computer is used to flood a server with TCP and UDP packets, whereas DDoS attack is where multiple systems target a single system with a DoS attack. A Denial of Service (DoS) attack is a type of cyber attack in which a single system floods a server with a large number of packets, overwhelming the server and causing it to become unavailable to legitimate users. The goal of a DoS attack is to prevent legitimate users from accessing the targeted server by consuming its resources or causing it to crash. A Distributed Denial of Service (DDoS) attack is a more sophisticated form of a DoS attack. In a DDoS attack, multiple systems, often compromised through malware, are used to flood a single server with packets, overwhelming it and making it unavailable to legitimate users. The goal of a DDoS attack is the same as a DoS attack, but the scale of the attack is much larger and the resources used to launch the attack are distributed across multiple systems. This makes DDoS attacks much harder to detect and mitigate.

   Source: Adapted from community discussion — sull3y

   Next question

10. Question 540 · 654 in bank

    

    Refer to the exhibit. An engineer created a policy named usera1 on a Cisco Secure Email Gateway to enable the antispam feature for an email address of usera1@cisco.com. Which configuration step must be performed next to apply the policy only to the usera1@cisco.com email address?

    • ASpecify the user in Mail Policies > Mail Policies Settings
    • BClick the Policy Name usera1 Policy, and then click Add User.
    • CSet the user in Mail Policies > Exception Table.
    • DClick IronPort Anti-Spam, and then click Add User.

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-701 practice, question 531. 654 questions available.