Apr-2024 Free 350-701 Test Questions Real Practice Test Questions
350-701 Dumps Updated Apr 02, 2024 WIith 630 Questions
Cisco SCOR 350-701 Practice Test Questions, Cisco SCOR 350-701 Exam Practice Test Questions
Cisco 350-701 SCOR: Implementing and Operating Cisco Security Core Technologies is a qualifying exam associated with three certifications, namely CCIE Security, CCNP Security, and Cisco Certified Specialist – Security Core.
Cisco 350-701 certification exam is designed for professionals working in network security roles such as network engineers, security administrators, and security operations center (SOC) analysts. Implementing and Operating Cisco Security Core Technologies certification is ideal for professionals who are looking to advance their careers in the field of network security and want to demonstrate their expertise in implementing and operating Cisco security core technologies.
NEW QUESTION # 161
Drag and drop the capabilities from the left onto the correct technologies on the right.
Answer:
Explanation:
NEW QUESTION # 162
An engineer enabled SSL decryption for Cisco Umbrella intelligent proxy and needs to ensure that traffic is inspected without alerting end-users.
- A. Upload the organization root CA to the Umbrella admin portal
- B. Restrict access to only websites with trusted third-party signed certificates.
- C. Modify the user's browser settings to suppress errors from Umbrella.
- D. Import the Umbrella root CA into the trusted root store on the user's device.
Answer: A
NEW QUESTION # 163
The main function of northbound APIs in the SDN architecture is to enable communication between which two areas of a network?
- A. SDN controller and the management solution
- B. management console and the SDN controller
- C. SDN controller and the cloud
- D. management console and the cloud
Answer: A
Explanation:
Northbound APIs (SDN northbound APIs) are typically RESTful APIs that are used to communicate between the SDN controller and the services and applications running over the network. Such northbound APIs can be used for the orchestration and automation of the network components to align with the needs of different applications via SDN network programmability1. The management solution is an example of an application that can use the northbound APIs to interact with the SDN controller and configure, monitor, and troubleshoot the network devices and services2. Therefore, the main function of northbound APIs in the SDN architecture is to enable communication between the SDN controller and the management solution. References: 1: What are SDN Northbound APIs (and SDN Rest APIs)? - SDxCentral 2: Software-Defined Networking Security and Network Programmability
NEW QUESTION # 164
Drag and drop the threats from the left onto examples of that threat on the right
Answer:
Explanation:
NEW QUESTION # 165
Drag and drop the security responsibilities from the left onto the corresponding cloud service models on the right.
Answer:
Explanation:
Explanation:
The cloud security shared responsibility model is a way of describing how the security tasks and obligations are divided between the cloud service provider (CSP) and the customer, depending on the type of cloud service model used. The cloud service models are:
* Software as a Service (SaaS): The CSP provides and manages the entire software stack, including the applications, data, runtime, middleware, operating system, virtualization, servers, storage, and networking. The customer only needs to access the software through a web browser or an application.
The customer is responsible for managing their own data and identities, as well as configuring the security settings of the software. The CSP is responsible for everything else, including patching the operating system and the applications12
* Platform as a Service (PaaS): The CSP provides and manages the platform layer, including the runtime, middleware, operating system, virtualization, servers, storage, and networking. The customer can deploy and run their own applications and data on the platform, using the tools and languages supported by the CSP. The customer is responsible for managing their own applications and data, as well as configuring
* the security settings of the platform. The CSP is responsible for patching the operating system and the middleware12
* Infrastructure as a Service (IaaS): The CSP provides and manages the infrastructure layer, including the virtualization, servers, storage, and networking. The customer can provision and use virtual machines, containers, or bare metal servers, and install their own operating system, middleware, applications, and data. The customer is responsible for managing and patching their own operating system, middleware, applications, and data, as well as configuring the security settings of the infrastructure. The CSP is responsible for the physical security and availability of the infrastructure12 References := 1: Shared responsibility in the cloud - Microsoft Azure 2: Cloud security shared responsibility model - NCSC
NEW QUESTION # 166
What is the function of SDN southbound API protocols?
- A. to allow for the dynamic configuration of control plane applications
- B. to enable the controller to make changes
- C. to enable the controller to use REST
- D. to allow for the static configuration of control plane applications
Answer: A
Explanation:
Explanation
NEW QUESTION # 167
An engineer is deploying Cisco Advanced Malware Protection (AMP) for Endpoints and wants to create a policy that prevents users from executing file named abc424952615.exe without quarantining that file What type of Outbreak Control list must the SHA.-256 hash value for the file be added to in order to accomplish this?
- A. Isolation
- B. Blocked Application
- C. Simple Custom Detection
- D. Advanced Custom Detection
Answer: C
NEW QUESTION # 168
Drag and drop the steps from the left into the correct order on the right to enable AppDynamics to monitor an EC2 instance in Amazon Web Services.
Answer:
Explanation:
NEW QUESTION # 169
An engineer configured a new network identity in Cisco Umbrella but must verify that traffic is being routed through the Cisco Umbrella network.
Which action tests the routing?
- A. Add the public IP address that the client computers are behind to a Core Identity.
- B. Browse to http://welcome.umbrella.com/ to validate that the new identity is working.
- C. Ensure that the client computers are pointing to the on-premises DNS servers.
- D. Enable the Intelligent Proxy to validate that traffic is being routed correctly.
Answer: D
Explanation:
Explanation/Reference:
NEW QUESTION # 170
A network engineer is configuring DMVPN and entered the crypto isakmp key cisc0380739941 address 0.0.0.0 command on host A.
The tunnel is not being established to hostB. What action is needed to authenticate the VPN?
- A. Enter the same command on hostB.
- B. Enter the command with a different password on hostB.
- C. Change the password on hostA to the default password.
- D. Change isakmp to ikev2 in the command on hostA.
Answer: A
NEW QUESTION # 171
What are two differences between a Cisco WSA that is running in transparent mode and one running in explicit mode? (Choose two.)
- A. The Cisco WSA responds with its own IP address only if it is running in transparent mode.
- B. The Cisco WSA is configured in a web browser only if it is running in transparent mode.
- C. When the Cisco WSA is running in transparent mode, it uses the WSA's own IP address as the HTTP request destination.
- D. The Cisco WSA uses a Layer 3 device to redirect traffic only if it is running in transparent mode.
- E. The Cisco WSA responds with its own IP address only if it is running in explicit mode.
Answer: A,C
NEW QUESTION # 172
After a recent breach, an organization determined that phishing was used to gain initial access to the network before regaining persistence. The information gained from the phishing attack was a result of users visiting known malicious websites. What must be done in order to prevent this from happening in the future?
- A. Modify outbound malware scanning policies
- B. Modify an access policy
- C. Modify web proxy settings
- D. Modify identification profiles
Answer: C
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guidev60/Access_
NEW QUESTION # 173
Which two deployment modes does the Cisco ASA FirePower module support? (Choose two)
- A. inline mode
- B. passive monitor-only mode
- C. routed mode
- D. active mode
- E. transparent mode
Answer: A,D
Explanation:
You can configure your ASA FirePOWER module using one of the following deployment models:
You can configure your ASA FirePOWER module in either an inline or a monitor-only (inline tap or passive) deployment.
Reference:
modules-sfr.html
NEW QUESTION # 174
Which functions of an SDN architecture require southbound APIs to enable communication?
- A. SDN controller and the network elements
- B. management console and the SDN controller
- C. SDN controller and the cloud
- D. management console and the cloud
Answer: A
NEW QUESTION # 175
Refer to the exhibit.
Which statement about the authentication protocol used in the configuration is true?
- A. There are separate authentication and authorization request packets
- B. The authentication request contains only a password
- C. The authentication and authorization requests are grouped in a single packet
- D. The authentication request contains only a username
Answer: C
Explanation:
This command uses RADIUS which combines authentication and authorization in one function (packet).
NEW QUESTION # 176
Which direction do attackers encode data in DNS requests during exfiltration using DNS tunneling?
- A. east-west
- B. outbound
- C. north-south
- D. inbound
Answer: B
Explanation:
DNS tunneling is a technique that encodes data of other programs and protocols in DNS queries, including data payloads that can be used to control a remote server and applications1. DNS exfiltration is a form of DNS tunneling that allows attackers to extract data from a compromised system by sending encoded DNS requests to a domain under their control2. The direction of the data transfer in DNS exfiltration is outbound, meaning from the victim's network to the attacker's network. This is different from inbound, which means from the attacker's network to the victim's network, or north-south and east-west, which are terms used to describe the traffic flow between different network segments or zones3. Outbound DNS requests are often allowed by default in many firewalls and network devices, making them an attractive channel for data exfiltration4. However, DNS exfiltration can be detected and prevented by using security solutions that monitor and analyze DNS traffic for anomalies and malicious patterns5.
References: 1: Improvements to DNS Tunneling & Exfiltration Detection - Cisco Umbrella 2: DNS Exfiltration & Tunneling: How it Works & DNSteal Demo Setup 3: What Is DNS Tunneling? - Palo Alto Networks 4: DNS Data Exfiltration and DNS Tunneling | Vercara 5: DNS Exfiltration: The Light at the End of the DNS Tunnel - site
NEW QUESTION # 177
Drag and drop the suspicious patterns for the Cisco Tetration platform from the left onto the correct definitions on the right.
Answer:
Explanation:
NEW QUESTION # 178
An organization wants to secure users, data, and applications in the cloud. The solution must be API-based and operate as a cloud-native CASB. Which solution must be used for this implementation?
- A. Cisco Umbrella
- B. Cisco Firepower Next-Generation Firewall
- C. Cisco Cloud Email Security
- D. Cisco Cloudlock
Answer: D
Explanation:
Cisco Cloudlock: Secure your cloud users, data, and applications with the cloud-native Cloud Access Security Broker (CASB) and cloud cybersecurity platform.
Cisco Cloudlock: Secure your cloud users, data, and applications with the cloud-native Cloud Access Security Broker (CASB) and cloud cybersecurity platform.
Reference:
738565.pdf
Cisco Cloudlock: Secure your cloud users, data, and applications with the cloud-native Cloud Access Security Broker (CASB) and cloud cybersecurity platform.
738565.pdf
NEW QUESTION # 179
A network engineer has been tasked with adding a new medical device to the network. Cisco ISE as being used as She NAC server, and the new device does not have a supplicant available. What must be done in order to securely connect this device to the network?
- A. Use 802.1X with posture assessment.
- B. Use 802.1X with profiling.
- C. Use MAB with profiling
- D. Use MAB with posture assessment.
Answer: C
Explanation:
Explanation
As the new device does not have a supplicant, we cannot use 802.1X.
MAC Authentication Bypass (MAB) is a fallback option for devices that don't support 802.1x. It is virtually always used in deployments in some way shape or form. MAB works by having the authenticator take the connecting device's MAC address and send it to the authentication server as its username and password. The authentication server will check its policies and send back an Access-Accept or Access-Reject just like it would with 802.1x.
Cisco ISE Profiling Services provides dynamic detection and classification of endpoints connected to the network. Using MAC addresses as the unique identifier, ISE collects various attributes for each network endpoint to build an internal endpoint database. The classification process matches the collected attributes to prebuilt or user-defined conditions, which are then correlated to an extensive library of profiles. These profiles include a wide range of device types, including mobile clients (iPads, Android tablets, Chromebooks, and so on), desktop operating systems (for example, Windows, Mac OS X, Linux, and others), and numerous non-user systems such as printers, phones, cameras, and game consoles.
Once classified, endpoints can be authorized to the network and granted access based on their profile. For example, endpoints that match the IP phone profile can be placed into a voice VLAN using MAC Authentication Bypass (MAB) as the authentication method. Another example is to provide differentiated network access to users based on the device used. For example, employees can get full access when accessing the network from their corporate workstation but be granted limited network access when accessing the network from their personal iPhone.
NEW QUESTION # 180
Drag and drop the concepts from the left onto the correct descriptions on the right
Answer:
Explanation:
NEW QUESTION # 181
What is the role of Cisco Umbrella Roaming when it is installed on an endpoint?
- A. To protect the endpoint against malicious file transfers
- B. To establish secure VPN connectivity to the corporate network
- C. To ensure that assets are secure from malicious links on and off the corporate network
- D. To enforce posture compliance and mandatory software
Answer: C
Explanation:
ExplanationUmbrella Roaming is a cloud-delivered security service for Cisco's next-generation firewall. It protects your employees even when they are off the VPN.
NEW QUESTION # 182
An email administrator is setting up a new Cisco ESA.
The administrator wants to enable the blocking of greymail for the end user. Which feature must the administrator enable first?
- A. Anti-Virus Filtering
- B. File Analysis
- C. Intelligent Multi-Scan
- D. IP Reputation Filtering
Answer: C
NEW QUESTION # 183
Which statement about IOS zone-based firewalls is true?
- A. An interface can be assigned only to one zone.
- B. An interface can be assigned to multiple zones.
- C. An unassigned interface can communicate with assigned interfaces
- D. Only one interface can be assigned to a zone.
Answer: A
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/support/docs/security/ios-firewall/98628-zone-design-guide.html
NEW QUESTION # 184
A network engineer must create an access control list on a Cisco Adaptive Security Appliance firewall.
The access control list must permit HTTP traffic to the internet from the organization's inside network 192.168.1.0/24.
Which IOS command must oe used to create the access control list?
- A.
- B.
- C.
- D.
Answer: B
Explanation:
To create an access control list (ACL) on a Cisco Adaptive Security Appliance (ASA) firewall, you need to use the access-list command followed by the name of the ACL, the action (permit or deny), the protocol, the source address and mask, and the destination address and mask. For example, to permit HTTP traffic from the inside network 192.168.1.0/24 to any destination on the internet, you can use this command:
access-list inside_access_in permit tcp 192.168.1.0 255.255.255.0 any eq www This command creates an ACL named inside_access_in that permits TCP traffic from the source network
192.168.1.0/24 to any destination with the destination port equal to 80 (www). The eq keyword is used to specify the port number or name. You can also use the range keyword to specify a range of ports.
To apply the ACL to an interface, you need to use the access-group command followed by the name of the ACL and the direction (in or out). For example, to apply the ACL to the inside interface in the inbound direction, you can use this command:
access-group inside_access_in in interface inside
This command applies the ACL inside_access_in to the interface named inside in the inbound direction. This means that the ACL will filter the traffic that enters the firewall through the inside interface.
Option D is the only option that matches the syntax of the access-list command for the ASA firewall. Option A is incorrect because it uses the ip keyword instead of the tcp keyword. Option B is incorrect because it uses the any keyword for both the source and destination addresses. Option C is incorrect because it uses the host keyword for the source address, which is not valid for a network address.
References:
* Configure ASA Access Control List for Various Scenarios
* Cisco ASA Access Lists Concepts and Configuration
* How to Configure Access Control Lists (ACL) on Cisco ASA 5500 Firewalls
NEW QUESTION # 185
Which two capabilities of Integration APIs are utilized with Cisco DNA center? (Choose two)
- A. Upgrade software on switches and routers
- B. Third party reporting
- C. Create new SSIDs on a wireless LAN controller
- D. Automatically deploy new virtual routers
- E. Connect to ITSM platforms
Answer: B,E
NEW QUESTION # 186
......
View All 350-701 Actual Free Exam Questions Updated: https://prepaway.vcetorrent.com/350-701-valid-vce-torrent.html