350-701 practice questions 71–80

1. Question 71 · 654 in bank

   What is an attribute of the DevSecOps process?

   • Asecurity scanning and theoretical vulnerabilities
   • Bdevelopment security
   • Cisolated security team
   • Dmandated security controls and check lists

   Show answer

   Answer: B

   Explanation

   DevSecOps (development, security, and operations) is a concept used in recent years to describe how to move security activities to the start of the development life cycle and have built-in security practices in the continuous integration/continuous deployment (CI/CD) pipeline. Thus minimizing vulnerabilities and bringing security closer to IT and business objectives. Three key things make a real DevSecOps environment: + Security testing is done by the development team. + Issues found during that testing is managed by the development team. + Fixing those issues stays within the development team. https://blogs.cisco.com/security/devsecops-win-win-for-all

   Source: Adapted from community discussion — sis_net_sec

   References

   • cisco.com documentation
   • Cisco documentation
   • Cisco documentation
   • cisco.com documentation
   • Cisco documentation

   Next question

2. Question 72 · 654 in bank

   On which part of the IT environment does DevSecOps focus?

   • Aapplication development
   • Bwireless network
   • Cdata center
   • Dperimeter network

   Show answer

   Answer: A

   Explanation

   A. DevSecOps focuses on the application development part of the IT environment. DevSecOps is a software development philosophy that emphasizes collaboration and communication between development, operations, and security teams in order to secure the entire software development life cycle. DevSecOps aims to integrate security into the development process, starting from the design phase, through to deployment and ongoing management. By focusing on the application development environment, DevSecOps aims to improve the security of software applications, reduce the risk of vulnerabilities, and ensure that applications are secure from the start.

   Source: Adapted from community discussion — sull3y

   References

   • Cisco documentation

   Next question

3. Question 73 · 654 in bank

   Select 2

   Which two deployment model configurations are supported for Cisco FTDv in AWS? (Choose two.)

   • ACisco FTDv configured in routed mode and managed by an FMCv installed in AWS
   • BCisco FTDv with one management interface and two traffic interfaces configured
   • CCisco FTDv configured in routed mode and managed by a physical FMC appliance on premises
   • DCisco FTDv with two management interfaces and one traffic interface configured
   • ECisco FTDv configured in routed mode and IPv6 configured

   Show answer

   Answer: AC

   Explanation

   Reference: https://www.cisco.com/c/en/us/products/collateral/security/adaptive-security-virtual-appliance-asav/white-paper-c11-740505.html

   Source: Adapted from community discussion — micruguy

   References

   • Cisco documentation
   • Cisco documentation

   Next question

4. Question 74 · 654 in bank

   DRAG DROP - Drag and drop the steps from the left into the correct order on the right to enable Cisco AppDynamics to monitor an EC2 instance in AWS. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Actually the answer is correct. According to this https://www.appdynamics.com/community/exchange/extension/aws-ec2-monitoring-extension/ The prerequisites states that you need a Standalone JAVA Machine Agent or SIM Agent; Which means you need to have that configured first before you can install the monitoring extension.

   Source: Adapted from community discussion — Reece_S

   

   Next question

5. Question 75 · 654 in bank

   What is a required prerequisite to enable malware file scanning for the Secure Internet Gateway?

   • AEnable IP Layer enforcement.
   • BActivate the Cisco AMP license.
   • CActivate SSL decryption.
   • DEnable Intelligent Proxy.

   Show answer

   Answer: D

   Explanation

   The Secure Internet Gateway is a security solution that helps protect your organization's network and users from online threats such as malware. To enable malware file scanning, it is necessary to have the Intelligent Proxy feature enabled. The Intelligent Proxy provides an additional layer of security by examining and filtering out malicious traffic, including malware files, before they can reach your network. Without this feature, the Secure Internet Gateway may not be able to detect and prevent malware from entering your network.

   Source: Adapted from community discussion — sull3y

   References

   • cisco.com documentation

   Next question

6. Question 76 · 654 in bank

   A company is experiencing exfiltration of credit card numbers that are not being stored on-premise. The company needs to be able to protect sensitive data throughout the full environment. Which tool should be used to accomplish this goal?

   • ACisco ISE
   • BWeb Security Appliance
   • CSecurity Manager
   • DCloudlock

   Show answer

   Answer: D

   Explanation

   The answer is D, Cloudlock. Cisco Cloudlock is an API-based broker that helps reduce compromises, application risks, and data breaches in an environment that is not on-premise. It provides protection of sensitive data throughout the full environment and helps secure cloud-based email, file storage, and web applications. Cloudlock detects and protects sensitive data across all cloud services, including cloud storage and collaboration services such as AWS, Box, Dropbox, Google Drive, Microsoft OneDrive, Salesforce, and more

   Source: Adapted from community discussion — sull3y

   Next question

7. Question 77 · 654 in bank

   Which type of attack is social engineering?

   • Atrojan
   • BMITM
   • Cphishing
   • Dmalware

   Show answer

   Answer: C

   Explanation

   C. Phishing Social engineering is a type of attack that relies on manipulating people to gain access to sensitive information or resources. Social engineering attacks can take many forms, but the most common is phishing. Phishing is a form of social engineering that uses email or other electronic communication methods to trick people into providing sensitive information or performing an action, such as clicking on a link that downloads malware. Phishing can take many forms, but the goal is always to trick people into giving up their personal information or taking actions that can compromise the security of their computer or network. Option A, Trojan, is a type of malware that disguises itself as legitimate software in order to gain access to a system. It can be delivered via social engineering but it is not the same thing as social engineering.

   Source: Adapted from community discussion — sull3y

   Next question

8. Question 78 · 654 in bank

   Select 2

   What are the two types of managed Intercloud Fabric deployment models? (Choose two.)

   • AService Provider managed
   • BUser managed
   • CPublic managed
   • DHybrid managed
   • EEnterprise managed

   Show answer

   Answer: AE

   Explanation

   It's a correct answer. Cisco Intercloud Fabric addresses the cloud deployment requirements appropriate for two hybrid cloud deployment models: Enterprise Managed and Service Provider Managed.

   Source: Adapted from community discussion — VI_Vershinin

   References

   • Cisco documentation
   • Cisco documentation

   Next question

9. Question 79 · 654 in bank

   An engineer needs a cloud solution that will monitor traffic, create incidents based on events, and integrate with other cloud solutions via an API. Which solution should be used to accomplish this goal?

   • ACASB
   • BCisco Cloudlock
   • CAdaptive MFA
   • DSIEM

   Show answer

   Answer: B

   Explanation

   I think it is D, SIEM (Security information and event management). https://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise/design-zone-security-technology-partners/bn_cisco_siem.pdf "This guide focuses on Cisco products and discusses how those products integrate with any third party SIEM product. " "Customers need the ability to log, monitor, and report on security incidents in their data infrastructure, and to log, store, and report on large volumes of security event logs." Cisco Cloudlock is a Cloud-Based Security Broker (CASB). "A CASB provides visibility and compliance checks, protects data against misuse and exfiltration, and provides threat protections against malware like ransomware." So basically Cloudlock is a DLP device.

   Source: Adapted from community discussion — statikd

   References

   • Cisco documentation

   Next question

10. Question 80 · 654 in bank

    An organization is using Cisco Firepower and Cisco Meraki MX for network security and needs to centrally manage cloud policies across these platforms. Which software should be used to accomplish this goal?

    • ACisco Defense Orchestrator
    • BCisco Configuration Professional
    • CCisco Secureworks
    • DCisco DNA Center

    Show answer

    Answer: A

    Explanation

    Reference: https://www.cisco.com/c/en/us/products/collateral/security/defense-orchestrator/datasheet-c78-736847.html

    Source: Adapted from community discussion — sull3y

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-701 practice, question 71. 654 questions available.