350-701 practice questions 561–570

1. Question 561 · 654 in bank

   DRAG DROP - Drag and drop the Cisco Secure Email Gateway benefits from the left to the corresponding deployment options on the right.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Cloud: - Dedicated email security deployments in multiple resilient Cisco data centers provide the highest levels of service availability and data protection. Virtual: -virtual appliances significantly lowers the cost of deploying email security, especially in highly distributed networks. -respond instantly to increasing traffic growth with simplified capacity planning. https://www.cisco.com/c/en/us/products/collateral/security/cloud-email-security/datasheet-c78-742868.html

   Source: Adapted from community discussion — dfb0b7d

   References

   • Cisco documentation

   

   Next question

2. Question 562 · 654 in bank

   What has driven an increase in the need for endpoint-based security?

   • Aminimal endpoint-based security manual configuration and implementation
   • Bincreased data volumes and value in data center storage
   • Cincreased number of BYOD policies and hybrid remote worker
   • Dstricter control mechanism requirements for enterprise access

   Show answer

   Answer: C

   Next question

3. Question 563 · 654 in bank

   A security test performed on one of the applications shows that user input is not validated. Which security vulnerability is the application more susceptible to because of this lack of validation?

   • Aman-in-the-middle
   • Bcross-site request forgery
   • CSQL injection
   • Ddenial-of-service

   Show answer

   Answer: C

   Next question

4. Question 564 · 654 in bank

   Which problem is solved by deploying a multicontext firewall?

   • Aoverlapping IP addressing plan
   • Bresilient high availability design
   • Cfaster inspection
   • Dmore secure policy

   Show answer

   Answer: A

   Next question

5. Question 565 · 654 in bank

   What must be configured on Cisco Secure Endpoint to create a custom detection file list to detect and quarantine future files?

   • ACreate an advanced custom detection and upload the hash of each file.
   • BAdd a network IP block allowed list to the configuration and add the blocked files.
   • CUse the simple custom detection feature and add each detection to the list.
   • DConfigure an application control allowed applications list to block the files.

   Show answer

   Answer: C

   References

   • Cisco documentation

   Next question

6. Question 566 · 654 in bank

   Which Cisco solution provides a comprehensive view of internet domains, IP addresses, and autonomous systems to help pinpoint attackers and malicious infrastructures?

   • ACisco Secure Workload Cloud
   • BCisco Advanced Malware Investigate
   • CCisco Threat Indication Database
   • DCisco Umbrella Investigate

   Show answer

   Answer: D

   References

   • cisco.com documentation

   Next question

7. Question 567 · 654 in bank

   Select 2

   An engineer must register a fixed network on a Cisco Umbrella platform. Which two actions must be performed when adding a new public IP address? (Choose two.)

   • AEnter a network public IP address.
   • BInstall the Umbrella root certificate.
   • CConfigure the DNS security settings.
   • DPoint DNS to Umbrella platform DNS servers.
   • EPoint DHCP to Umbrella platform DHCP servers.

   Show answer

   Answer: AD

   Next question

8. Question 568 · 654 in bank

   What is the term for having information about threats and threat actors that helps mitigate harmful events that would otherwise compromise networks or systems?

   • Athreat intelligence
   • BIndicators of Compromise
   • Ctrusted automated exchange
   • DThe Exploit Database

   Show answer

   Answer: A

   Explanation

   The correct answer is A. The term for having information about threats and threat actors that helps mitigate harmful events that would otherwise compromise networks or systems is "threat intelligence." Threat intelligence refers to the knowledge and insights gained from analyzing and understanding potential threats and threat actors, including their tactics, techniques, and procedures (TTPs). By leveraging threat intelligence, organizations can better understand the risks they face and take proactive steps to prevent or mitigate potential attacks. Threat intelligence can come from a variety of sources, including open-source intelligence, commercial threat intelligence feeds, and internal security operations.

   Source: Adapted from community discussion — Naderelmansi

   Next question

9. Question 569 · 654 in bank

   Which action configures the iEEE 802.1X Flexible Authentication feature to support Layer 3 authentication mechanisms?

   • AModify the Dot1x configuration on the VPN server to send Layer 3 authentications to an external authentication database.
   • BIdentify the devices using this feature and create a policy that allows them to pass Layer 2 authentication.
   • CAdd MAB into the switch to allow redirection to a Layer 3 device for authentication.
   • DConfigure WebAuth so the hosts are redirected to a web page for authentication.

   Show answer

   Answer: D

   Explanation

   A & C are Layer 2. IEEE 802.1X Flexible Authentication Methods The IEEE 802.1X Flexible Authentication feature supports three authentication methods: dot1X--IEEE 802.1X authentication is a Layer 2 authentication method. mab--MAC-Authentication Bypass is a Layer 2 authentication method. webauth--Web authentication is a Layer 3 authentication method. So, it's D imo.

   Source: Adapted from community discussion — klu16

   Next question

10. Question 570 · 654 in bank

    Which API technology with SDN architecture is used to communicate with a controller and network devices such as routers and switches?

    • Arest APIs
    • Bnorthbound APIs
    • Csouthbound APIs
    • Dunprotected APIs

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-701 practice, question 561. 654 questions available.