TestBraindump 350-701 Dumps Real Exam Questions Test Engine Dumps Training
Cisco 350-701 exam dumps and online Test Engine
Exam Topics for Implementing and Operating Cisco Security Core Technologies (SCOR 350-701)
The following will be practiced in CISCO 350-701 practice exam and CISCO 350-701 practice tests:
- Content Security
- Securing the Cloud
- Endpoint Protection and Detection
- Network Security
- Security Concepts
NEW QUESTION 161
What is the benefit of installing Cisco AMP for Endpoints on a network?
- A. It provides flow-based visibility for the endpoints' network connections.
- B. It enables behavioral analysis to be used for the endpoints.
- C. It provides operating system patches on the endpoints for security.
- D. It protects endpoint systems through application control and real-time scanning.
Answer: D
Explanation:
https://www.cisco.com/c/en/us/solutions/collateral/enterprise-networks/advanced-malware-protection/at-a-glance-c45-731874.html
NEW QUESTION 162
Which exfiltration method does an attacker use to hide and encode data inside DNS requests and queries?
- A. DNS tunneling
- B. DNS security
- C. DNSCrypt
- D. DNSSEC
Answer: A
Explanation:
Explanation
DNS Tunneling is a method of cyber attack that encodes the data of other programs or protocols in DNS queries and responses. DNS tunneling often includes data payloads that can be added to an attacked DNS server and used to control a remote server and applications.
NEW QUESTION 163
Refer to the exhibit.
A network administrator configured a site-to-site VPN tunnel between two Cisco IOS routers, and hosts are unable to communicate between two sites of VPN. The network administrator runs the debug crypto isakmp sa command to track VPN status What is the problem according to this command output?
- A. interesting traffic was not applied
- B. encryption algorithm mismatch
- C. hashing algorithm mismatch
- D. authentication key mismatch
Answer: D
NEW QUESTION 164
What is the function of SDN southbound API protocols?
- A. to enable the controller to use REST
- B. to allow for the static configuration of control plane applications
- C. to enable the controller to make changes
- D. to allow for the dynamic configuration of control plane applications
Answer: C
Explanation:
Reference:
NEW QUESTION 165
A Cisco ESA administrator has been tasked with configuring the Cisco ESA to ensure there are no viruses before quarantined emails are delivered. In addition, delivery of mail from known bad mail servers must be prevented Which two actions must be taken in order to meet these requirements? (Choose two.)
- A. E
- B. D
- C. A
- D. B
- E. C
Answer: A,C
Explanation:
NEW QUESTION 166
An organization wants to secure users, data, and applications in the cloud. The solution must be API-based and operate as a cloud-native CASB. Which solution must be used for this implementation?
- A. Cisco Firepower Next-Generation Firewall
- B. Cisco Umbrella
- C. Cisco Cloud Email Security
- D. Cisco Cloudlock
Answer: D
Explanation:
Cisco Cloudlock: Secure your cloud users, data, and applications with the cloud-native Cloud Access Security Broker (CASB) and cloud cybersecurity platform.
Cisco Cloudlock: Secure your cloud users, data, and applications with the cloud-native Cloud Access Security Broker (CASB) and cloud cybersecurity platform.
Reference:
738565.pdf
Cisco Cloudlock: Secure your cloud users, data, and applications with the cloud-native Cloud Access Security Broker (CASB) and cloud cybersecurity platform.
738565.pdf
NEW QUESTION 167
Which suspicious pattern enables the Cisco Tetration platform to learn the normal behavior of users?
- A. interesting file access
- B. file access from a different user
- C. privilege escalation
- D. user login suspicious behavior
Answer: D
Explanation:
Explanation Explanation The various suspicious patterns for which the Cisco Tetration platform looks in the current release are: + Shell code execution: Looks for the patterns used by shell code. + Privilege escalation: Watches for privilege changes from a lower privilege to a higher privilege in the process lineage tree. + Side channel attacks: Cisco Tetration platform watches for cache-timing attacks and page table fault bursts. Using these, it can detect Meltdown, Spectre, and other cache-timing attacks. + Raw socket creation: Creation of a raw socket by a nonstandard process (for example, ping). + User login suspicious behavior: Cisco Tetration platform watches user login failures and user login methods. + Interesting file access: Cisco Tetration platform can be armed to look at sensitive files. + File access from a different user: Cisco Tetration platform learns the normal behavior of which file is accessed by which user. + Unseen command: Cisco Tetration platform learns the behavior and set of commands as well as the lineage of each command over time. Any new command or command with a different lineage triggers the interest of the Tetration Analytics platform. Reference: https://www.cisco.com/c/en/us/products/collateral/data-center-analytics/tetration-analytics/whitepaper-c11-740380.html Explanation The various suspicious patterns for which the Cisco Tetration platform looks in the current release are:
+ Shell code execution: Looks for the patterns used by shell code.
+ Privilege escalation: Watches for privilege changes from a lower privilege to a higher privilege in the process lineage tree.
+ Side channel attacks: Cisco Tetration platform watches for cache-timing attacks and page table fault bursts.
Using these, it can detect Meltdown, Spectre, and other cache-timing attacks.
+ Raw socket creation: Creation of a raw socket by a nonstandard process (for example, ping).
+ User login suspicious behavior: Cisco Tetration platform watches user login failures and user login methods.
+ Interesting file access: Cisco Tetration platform can be armed to look at sensitive files.
+ File access from a different user: Cisco Tetration platform learns the normal behavior of which file is accessed by which user.
+ Unseen command: Cisco Tetration platform learns the behavior and set of commands as well as the lineage of each command over time. Any new command or command with a different lineage triggers the interest of the Tetration Analytics platform.
Explanation Explanation The various suspicious patterns for which the Cisco Tetration platform looks in the current release are: + Shell code execution: Looks for the patterns used by shell code. + Privilege escalation: Watches for privilege changes from a lower privilege to a higher privilege in the process lineage tree. + Side channel attacks: Cisco Tetration platform watches for cache-timing attacks and page table fault bursts. Using these, it can detect Meltdown, Spectre, and other cache-timing attacks. + Raw socket creation: Creation of a raw socket by a nonstandard process (for example, ping). + User login suspicious behavior: Cisco Tetration platform watches user login failures and user login methods. + Interesting file access: Cisco Tetration platform can be armed to look at sensitive files. + File access from a different user: Cisco Tetration platform learns the normal behavior of which file is accessed by which user. + Unseen command: Cisco Tetration platform learns the behavior and set of commands as well as the lineage of each command over time. Any new command or command with a different lineage triggers the interest of the Tetration Analytics platform. Reference: https://www.cisco.com/c/en/us/products/collateral/data-center-analytics/tetration-analytics/whitepaper-c11-740380.html
NEW QUESTION 168
In which two ways does Easy Connect help control network access when used with Casco TrustSec? Choose two.)
- A. It allows for the assignment of Security Group Tags and does not require 802.1x to be configured on the switch or the endpoint.
- B. It allows for managed endpoints that authenticate to AD to be mapped to Security Groups (PassiveID).
- C. It integrates with third-party products to provide better visibility throughout the network.
- D. It allows multiple security products to share information and work together to enhance security posture in the network.
- E. It creates a dashboard in Cisco ISE that provides full visibility of all connected endpoints.
Answer: A,B
Explanation:
Explanation
Easy Connect simplifies network access control and segmentation by allowing the assignment of Security Group Tags to endpoints without requiring 802.1X on those endpoints, whether using wired or wireless connectivity.
Reference:
easy-connect-configuration-guide.pdf
NEW QUESTION 169
What is the difference between a vulnerability and an exploit?
- A. An exploit is a hypothetical event that causes a vulnerability in the network
- B. A vulnerability is a weakness that can be exploited by an attacker
- C. A vulnerability is a hypothetical event for an attacker to exploit
- D. An exploit is a weakness that can cause a vulnerability in the network
Answer: B
NEW QUESTION 170
A Cisco Firepower administrator needs to configure a rule to allow a new application that has never been seen on the network. Which two actions should be selected to allow the traffic to pass without inspection? (Choose two.)
- A. permit
- B. trust
- C. allow
- D. monitor
- E. reset
Answer: B,C
Explanation:
Explanation
NEW QUESTION 171
What are the two types of managed Intercloud Fabric deployment models? (Choose two.)
- A. Public managed
- B. User managed
- C. Enterprise managed
- D. Service Provider managed
- E. Hybrid managed
Answer: D,E
Explanation:
Reference:
NEW QUESTION 172
Which two preventive measures are used to control cross-site scripting? (Choose two.)
- A. Enable client-side scripts on a per-domain basis.
- B. Incorporate contextual output encoding/escaping.
- C. Run untrusted HTML input through an HTML sanitization engine.
- D. SameSite cookie attribute should not be used.
- E. Disable cookie inspection in the HTML inspection engine.
Answer: A,B
Explanation:
Explanation/Reference:
NEW QUESTION 173
Drag and drop the solutions from the left onto the solution's benefits on the right.
Answer:
Explanation:
NEW QUESTION 174
What is a benefit of using Cisco FMC over Cisco ASDM?
- A. Cisco FMC supports pushing configurations to devices while Cisco ASDM does not.
- B. Cisco FMC provides centralized management while Cisco ASDM does not.
- C. Cisco FMC supports all firewall products whereas Cisco ASDM only supports Cisco ASA devices
- D. Cisco FMC uses Java while Cisco ASDM uses HTML5.
Answer: B
Explanation:
https://www.cisco.com/c/en/us/td/docs/security/firepower/compatibility/firepower-compatibility.html
NEW QUESTION 175
Which two endpoint measures are used to minimize the chances of falling victim to phishing and social engineering attacks? (Choose two.)
- A. Perform backups to the private cloud.
- B. Install a spam and virus email filter.
- C. Patch for cross-site scripting.
- D. Protect against input validation and character escapes in the endpoint.
- E. Protect systems with an up-to-date antimalware program.
Answer: D,E
NEW QUESTION 176
Under which two circumstances is a CoA issued? (Choose two.)
- A. An endpoint is profiled for the first time.
- B. A new Identity Source Sequence is created and referenced in the authentication policy.
- C. A new authentication rule was added to the policy on the Policy Service node.
- D. An endpoint is deleted on the Identity Service Engine server.
- E. A new Identity Service Engine server is added to the deployment with the Administration persona.
Answer: A,D
Explanation:
Explanation/Reference: https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_prof_pol.html
NEW QUESTION 177
DRAG DROP
Drag and drop the capabilities from the left onto the correct technologies on the right.
Select and Place:
Answer:
Explanation:
NEW QUESTION 178
Refer to the exhibit.
What does the number 15 represent in this configuration?
- A. access list that identifies the SNMP devices that can access the router
- B. privilege level for an authorized user to this router
- C. interval in seconds between SNMPv3 authentication attempts
- D. number of possible failed attempts until the SNMPv3 user is locked out
Answer: A
NEW QUESTION 179
A network administrator is configuring a rule in an access control policy to block certain URLs and selects the "Chat and Instant Messaging" category. Which reputation score should be selected to accomplish this goal?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
Explanation:
We choose "Chat and Instant Messaging" category in "URL Category":
To block certain URLs we need to choose URL Reputation from 6 to 10.
NEW QUESTION 180
On which part of the IT environment does DevSecOps focus?
- A. wireless network
- B. application development
- C. perimeter network
- D. data center
Answer: B
NEW QUESTION 181
Which two cryptographic algorithms are used with IPsec? {Choose two.)
- A. Triple AMC-CBC
- B. HMAC-SHA1/SHA2
- C. AES-CBC
- D. AES-BAC
- E. AES-ABC
Answer: B,C
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_vpnips/configuration/15-mt/sec-sec-for-vpns-w-ips
NEW QUESTION 182
In an IaaS cloud services model, which security function is the provider responsible for managing?
- A. Internet proxy
- B. firewalling virtual machines
- C. CASB
- D. hypervisor OS hardening
Answer: B
Explanation:
In this IaaS model, cloud providers offer resources to users/machines that include computers as virtual machines, raw (block) storage, firewalls, load balancers, and network devices.
Note: Cloud access security broker (CASB) provides visibility and compliance checks, protects data against misuse and exfiltration, and provides threat protections against malware such as ransomware.
NEW QUESTION 183
Which product allows Cisco FMC to push security intelligence observable to its sensors from other products?
- A. Threat Intelligence Director
- B. Cisco Talos Intelligence
- C. Cognitive Threat Analytics
- D. Encrypted Traffic Analytics
Answer: A
NEW QUESTION 184
......
Recommended Online Course: Implementing and Operating Cisco Security Core Technologies (SCOR) v1.0
For 350-701 certification exam prep, the vendor provides a detailed training course of a similar name. In particular, this course is intended to equip you with the essential skills that you will need to obtain either the Cisco CCIE Security or CCNP Security certifications for an advanced role in security. It focuses on the technical skills you need to implement the core security solutions that will protect your organization from rampant security threats. Besides, you will master a wide range of concepts as included in the exam content outline. These include the aforementioned topics of endpoint protection, secure network access, and visibility & enforcement just to mention a few. While such a course will likely involve interactive lectures and classroom training, it also provides an all-embracing hands-on experience in deploying the Cisco Firepower solutions and configuring tons of access control policies among other skills. The course duration is 8 days but in some way, the mode of delivery will vary depending on the training method used. For instance, the instructor-led training and virtual instructor-led training options feature a combination of classroom-based sessions and web-based classes respectively, which run for 5 days. Also, they have an additional 3 days to cover the self-paced material. On the other hand, the E-Learning option only features a comprehensive 8-day training, involving practice, challenges, and videos. Apart from the individuals aiming for the CCNP Security and CCIE Security certifications, this course should also be taken by those candidates whose roles involve managing or deploying security concepts in some way. You may want to visit the Cisco certification page to get more details about this course before registering for your 350-701 test.
Cisco 350-701: Selling CCNP Security Products and Solutions: https://quiztorrent.testbraindump.com/350-701-exam-prep.html
