350-701 practice questions 601–610

1. Question 601 · 654 in bank

   What is a capability of Cisco Secure Email Cloud Gateway compared to Cisco Secure Email Gateway?

   • ASecure Email Cloud Gateway is an add-on that is deployed to a web browser by using a group policy, and Secure Email Gateway requires a server infrastructure.
   • BSecure Email Cloud Gateway requires that a proxy be deployed to a web browser, and Secure Email Gateway requires a network reconfiguration.
   • CSecure Email Cloud Gateway protects email without having to deploy an infrastructure, and Secure Email Gateway requires a server infrastructure.
   • DSecure Email Cloud Gateway requires an ASA to redirect email by using WCCP, and Secure Email Gateway requires that the ASA be inline.

   Show answer

   Answer: C

   Next question

2. Question 602 · 654 in bank

   

   Refer to the exhibit. Which command was used to generate this output and to show which ports are authenticating with dot1x or mab?

   • Ashow authentication registrations
   • Bshow authentication method
   • Cshow dot1x all
   • Dshow authentication sessions

   Show answer

   Answer: D

   Explanation

   https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/s1/sec-s1-xe-3se-3850-cr-book/sec-s1-xe-3se-3850-cr-book_chapter_01.html Device# show authentication sessions Interface MAC Address Method Domain Status Session ID Gi1/48 0015.63b0.f676 dot1x DATA Authz Success 0A3462B1000000102983C05C Gi1/5 000f.23c4.a401 mab DATA Authz Success 0A3462B10000000D24F80B58 Gi1/5 0014.bf5d.d26d dot1x DATA Authz Success 0A3462B10000000E29811B94

   Source: Adapted from community discussion — [Removed]

   References

   • Cisco documentation
   • Cisco documentation

   Next question

3. Question 603 · 654 in bank

   An organization has had some malware infections recently and the management team wants to use Cisco Secure Firewall to enforce file policies to prevent malicious files from being downloaded. The SHA-256 hash value of all files traversing the firewall must be calculated and compared to the hash values of known malware code. Which file rule action is used to block only the files that are confirmed to be malware?

   • ABlock Malware
   • BDetect Files
   • CMalware Cloud Lookup
   • DBlock Files

   Show answer

   Answer: A

   References

   • cisco.com documentation

   Next question

4. Question 604 · 654 in bank

   Which Cisco solution integrates industry-leading artificial intelligence and machine learning analytics and an assurance database to review the security posture and maintain visibility of an organizations cloud environment?

   • ACisco Secure Workload
   • BCisco CSR1000v
   • CCisco DNA
   • DCisco FTD

   Show answer

   Answer: C

   References

   • Cisco documentation

   Next question

5. Question 605 · 654 in bank

   An engineer is configuring cloud logging on Cisco ASA and needs events to compress. Which component must be configured to accomplish this goal?

   • ACisco analytics
   • BCDO event viewer
   • CSWC service
   • DSDC VM

   Show answer

   Answer: D

   References

   • Cisco documentation

   Next question

6. Question 606 · 654 in bank

   When an assessment of cloud services and applications is conducted, which tool is used to show user activity and data usage across the applications?

   • ACisco ASA
   • BCisco CloudLock
   • CCisco ISE
   • DCisco AMP Private Cloud

   Show answer

   Answer: B

   Next question

7. Question 607 · 654 in bank

   Select 2

   An engineer implements Cisco CloudLock to secure a Microsoft Office 365 application in the cloud. The engineer must configure protection for corporate files in case of any incidents. Which two actions must be taken to complete the implementation? (Choose two.)

   • ARemove all users as collaborators on the files.
   • BTransfer ownership of the files to a specified owner and folder.
   • CExpire the public share URL.
   • DDisable the ability for commenters and viewers to download and copy the files.
   • ESend Cisco Webex message to specified users when an incident is triggered.

   Show answer

   Answer: AC

   Next question

8. Question 608 · 654 in bank

   

   Refer to the exhibit. A company named ABC has a Cisco Secure Email Gateway and an engineer must configure the incoming mail policy so that emails containing malware files are quarantined instead of dropped and to prevent an increase in false positives causing emails to be dropped erroneously. What must be configured on the Secure Email Gateway?

   • AChange the Policies Order.
   • BOpen Default Policy, Malware File, and then Action Applied to Message.
   • CDelete usera1 policy.
   • DOpen usera1 policy, Messages with Malware Attachments, and then Action Applied to Message.

   Show answer

   Answer: B

   Next question

9. Question 609 · 654 in bank

   How does a Cisco Secure Web Appliance integrated with LDAP handle the permissions of a currently logged in Active Directory group member when the Active Directory administrator changes the permissions of the user's group mid session?

   • AIf the Cisco Secure Client Mobility Client is configured on the endpoint to provide Active Directory updates, the Cisco Secure Web Appliance changes the user's permissions immediately when alerted by the client.
   • BIf the Cisco Secure Web Appliance is configured to receive real-time updates from the Active Directory user agent, it changes the user's permissions immediately when the agent sends the update.
   • CThe Cisco Secure Web Appliance terminates the current session and prompts the user to re-authenticate in order to update the effective permissions.
   • DThe Cisco Secure Web Appliance continues to operate using the permissions that were in effect when the user logged in for the duration of the user's session.

   Show answer

   Answer: B

   Explanation

   Answer is correcto, the integration with LDAP validate the credentials at session's begening and need to end the session or re-authenticate to request new credentials.

   Source: Adapted from community discussion — GongRoca

   Next question

10. Question 610 · 654 in bank

    

    Refer to the exhibit. An engineer must forward all web traffic sent from Client-SiteA to the monitoring server to build a baseline of expected traffic once a new Cisco Secure Web Appliance is deployed. What must be configured on the switch to meet the requirement?

    • AERSPAN
    • BRSPAN
    • CWCCP
    • DSPAN

    Show answer

    Answer: D

    References

    • cisco.com documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-701 practice, question 601. 654 questions available.