350-701 practice questions 641–650

1. Question 641 · 654 in bank

   

   Refer to the exhibit. Which type of authentication is in use?

   • APOP3 authentication
   • BSMTP relay server authentication
   • Cexternal user and relay mail authentication
   • DLDAP authentication for Microsoft Outlook

   Show answer

   Answer: D

   Explanation

   Okay okay TEAM We will clarify the image: LDAP AUTH Its is true is the action committed for External user and relay mail auth. And the question ask Told "Which Type of authentication is in use " D is the answer https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118545-technote-esa-00.html This document describes how to configure LDAP SMTPAUTH to authenticate external users and relay mail. :)

   Source: Adapted from community discussion — jaciro11

   References

   • Cisco documentation
   • Cisco documentation

   Next question

2. Question 642 · 654 in bank

   

   Refer to the exhibit. An organization is using DHCP Snooping within their network. A user on VLAN 41 on a new switch is complaining that an IP address is not being obtained. Which command should be configured on the switch interface in order to provide the user with network connectivity?

   • Aip dhcp snooping limit 41
   • Bip dhcp snooping verify mac-address
   • Cip dhcp snooping trust
   • Dip dhcp snooping vlan 41

   Show answer

   Answer: C

   Explanation

   Even though the correct answer is C the entire question and especially exhibit is stupid. We do not know where the DHCP server is. It could be on the same switch or the other switch reachable via the shown interface. If it is on the same switch then adding "ip dhcp snooping trust" on port 41 won't help because it needs added on the port where DHCP server is connected. An untrusted port is a port that does not accept DHCP server messages. In other words, if a device is connected to an untrusted port, it can obtain IP configuration from the DHCP server but it cannot offer an IP configuration. A trusted port is a port that accepts DHCP server messages. In other words, a DHCP server can provide IP configuration only if it is connected to a trusted port.

   Source: Adapted from community discussion — zheka

   Next question

3. Question 643 · 654 in bank

   

   Refer to the exhibit. Traffic is not passing through IPsec site-to-site VPN on the Firepower Threat Defense appliance. What is causing this issue?

   • ASite-to-site VPN preshared keys are mismatched.
   • BSite-to-site VPN peers are using different encryption algorithms.
   • CNo split-tunnel policy is defined on the Firepower Threat Defense appliance.
   • DThe access control policy is not allowing VPN traffic in.

   Show answer

   Answer: D

   Explanation

   A - vpn is established B - vpn is established C - Split Tunneling has nothing to do with a site-to-site VPN. D - we see traffic is comming in but no traffic is going into the tunnel so its likely a access policy wrong or missing

   Source: Adapted from community discussion — kerniger

   Next question

4. Question 644 · 654 in bank

   

   Refer to the exhibit. A network administrator configured a site-to-site VPN tunnel between two Cisco IOS routers, and hosts are unable to communicate between two sites of VPN. The network administrator runs the debug crypto isakmp sa command to track VPN status. What is the problem according to this command output?

   • Ainteresting traffic was not applied
   • Bencryption algorithm mismatch
   • Cauthentication key mismatch
   • Dhashing algorithm mismatch

   Show answer

   Answer: C

   Explanation

   Answer:C https://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-negotiation-ike-protocols/5409-ipsec-debug-00.html n the show crypto isakmp sa output, the state should always be QM_IDLE. If the state is MM_KEY_EXCH, it means either the configured pre-shared key is not correct or the peer IP addresses are different.

   Source: Adapted from community discussion — denverfly

   References

   • Cisco documentation

   Next question

5. Question 645 · 654 in bank

   Which policy represents a shared set of features or parameters that define the aspects of a managed device that are likely to be similar to other managed devices in a deployment?

   • Agroup policy
   • Baccess control policy
   • Cdevice management policy
   • Dplatform settings policy

   Show answer

   Answer: D

   Explanation

   Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/622/configuration/guide/fpmc-config-guide-v622/ platform_settings_policies_for_managed_devices.pdf

   References

   • Cisco documentation

   Next question

6. Question 646 · 654 in bank

   The Cisco ASA must support TLS proxy for encrypted Cisco Unified Communications traffic. Where must the ASA be added on the Cisco UC Manager platform?

   • ACertificate Trust List
   • BEndpoint Trust List
   • CEnterprise Proxy Service
   • DSecured Collaboration Proxy

   Show answer

   Answer: A

   Explanation

   Incorporating the Firewall into the Unified Communications System Configuring the ASA is not enough to fully incorporate the firewall into the Cisco Unified Communications system. You must also add the ASA to the Certificate Trust List (CTL) using the Cisco Certificate Trust List Client, which is part of the Unified Communications Manager. https://www.cisco.com/c/en/us/td/docs/security/asa/special/unified-communications/unified-communications-guide/tls-proxy-for-encrypted-voice-inspection.html?bookSearch=true

   Source: Adapted from community discussion — red_sparrow_Gr

   References

   • Cisco documentation

   Next question

7. Question 647 · 654 in bank

   Select 2

   Which two application layer preprocessors are used by Firepower Next Generation Intrusion Prevention System? (Choose two.)

   • ASIP
   • Binline normalization
   • CSSL
   • Dpacket decoder
   • Emodbus

   Show answer

   Answer: AC

   Explanation

   Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Application_Layer_Preprocessors.html

   Source: Adapted from community discussion — sull3y

   References

   • Cisco documentation

   Next question

8. Question 648 · 654 in bank

   Which feature is configured for managed devices in the device platform settings of the Firepower Management Center?

   • Aquality of service
   • Btime synchronization
   • Cnetwork address translations
   • Dintrusion policy

   Show answer

   Answer: B

   References

   • Cisco documentation

   Next question

9. Question 649 · 654 in bank

   Which Cisco security solution gives the most complete view of the relationships and evolution of Internet domains, IPs, and files, and helps to pinpoint attackers’ infrastructures and predict future threat?

   • ACisco Umbrella Investigate
   • BCisco Secure Network Analytics
   • CCisco pxGrid
   • DCisco Secure Cloud Analytics

   Show answer

   Answer: A

   Next question

10. Question 650 · 654 in bank

    How does a Cisco Secure Firewall help to lower the risk of exfiltration techniques that steal customer data?

    • Ablocking UDP port 53
    • Bblocking TCP port 53
    • Cinspecting the DNS traffic
    • Dencrypting the DNS communication

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-701 practice, question 641. 654 questions available.