Ensure Success With Updated Verified 350-701 Exam Dumps [2024]
Exam Materials for You to Prepare & Pass 350-701 Exam.
Cisco 350-701 exam, also known as Implementing and Operating Cisco Security Core Technologies, is a certification exam that validates the candidates' knowledge and skills in implementing and operating core security technologies. 350-701 exam is one of the requirements for obtaining the Cisco Certified Network Professional (CCNP) Security and Cisco Certified Specialist - Security Core certifications. 350-701 exam focuses on topics such as network security, cloud security, content security, endpoint protection and detection, secure network access, visibility, and enforcement.
NEW QUESTION # 29
Which technology should be used to help prevent an attacker from stealing usernames and passwords of users within an organization?
- A. multifactor authentication
- B. fingerprinting
- C. RADIUS-based REAP
- D. Dynamic ARP Inspection
Answer: A
Explanation:
Multifactor authentication (MFA) is an authentication method that requires the user to provide two or more verification factors to gain access to a resource such as an application, online account, or a VPN1. MFA is a core component of a strong identity and access management (IAM) policy. MFA can help prevent an attacker from stealing usernames and passwords of users within an organization by adding an extra layer of security beyond the traditional username and password. For example, a user may need to enter a one-time code sent to their phone or email, scan their fingerprint, or use a hardware token to prove their identity. This way, even if an attacker obtains the user's credentials, they cannot access the resource without the second factor2.
The other options are not technologies that can help prevent an attacker from stealing usernames and passwords of users within an organization. RADIUS-based REAP is a protocol that allows wireless clients to authenticate with a RADIUS server, but it does not provide MFA3. Fingerprinting is a technique that identifies the operating system or application of a device based on its network characteristics, but it does not provide MFA4. Dynamic ARP Inspection is a security feature that prevents ARP spoofing attacks by validating ARP packets, but it does not provide MFA5.
References := 1: What is Multi-Factor Authentication (MFA)? |
OneLogin(https://www.onelogin.com/learn/what-is-mfa) 2: What is: Multifactor Authentication - Microsoft Support(https://support.microsoft.com/en-us/topic/what-is-multifactor-authentication-e5e39437-121c-be60-d123 Implementing and Operating Cisco Security Core Technologies (SCOR) v1.0, Module 3: Securing the Network, Lesson 3.3: Secure Wireless Connectivity, Topic 3.3.1: Wireless Security Protocols, page 3-40. 4:
Implementing and Operating Cisco Security Core Technologies (SCOR) v1.0, Module 2: Securing the Cloud, Lesson 2.2: Cloud Security Assessment, Topic 2.2.1: Cloud Security Concepts, page 2-13. 5: Implementing and Operating Cisco Security Core Technologies (SCOR) v1.0, Module 3: Securing the Network, Lesson 3.2:
Secure Network Access, Topic 3.2.2: Layer 2 Security Features, page 3-19.
NEW QUESTION # 30
An email administrator is setting up a new Cisco ESA. The administrator wants to enable the blocking of greymail for the end user. Which feature must the administrator enable first?
- A. IP Reputation Filtering
- B. Anti-Virus Filtering
- C. File Analysis
- D. Intelligent Multi-Scan
Answer: D
NEW QUESTION # 31
Drag and drop the descriptions from the left onto the correct protocol versions on the right.
Answer:
Explanation:
NEW QUESTION # 32
What provides the ability to program and monitor networks from somewhere other than the DNAC GUI?
- A. NetFlow
- B. API
- C. ASDM
- D. desktop client
Answer: B
Explanation:
The Cisco DNA Center API provides the ability to program and monitor networks from somewhere other than the DNAC GUI. The API is a set of RESTful web services that allow users to interact with Cisco DNA Center programmatically. The API can be used to automate tasks, integrate with third-party applications, or create custom applications. The API exposes the same functionality as the DNAC GUI, such as design, provision, policy, assurance, and platform1. The API also provides documentation, examples, and testing tools for each API call1. References :=
* Cisco DNA Center User Guide, Release 2.3.3
* Cisco DNA Center User Guide, Release 2.2.2
* DNAC Tour Part 1: Introduction to Cisco DNA Center
* Cisco DNA Center Platform User Guide, Release 2.2.2
NEW QUESTION # 33
An engineer is configuring cloud logging using a company-managed Amazon S3 bucket for Cisco Umbrella logs. What benefit does this configuration provide for accessing log data?
- A. Data can be stored offline for 30 days.
- B. It can grant third-party SIEM integrations write access to the S3 bucket
- C. No other applications except Cisco Umbrella can write to the S3 bucket
- D. It is included m the license cost for the multi-org console of Cisco Umbrella
Answer: B
Explanation:
Using a company-managed Amazon S3 bucket for Cisco Umbrella logs allows the administrator to have full control over the access and lifecycle of the log data. This configuration can grant third-party SIEM integrations write access to the S3 bucket, which can enable more advanced analysis and correlation of the log data with other sources. This configuration also provides more flexibility in terms of how long the data can be stored offline, as opposed to the Cisco-managed S3 bucket, which has a fixed retention period of 30 days. References:
* Enable Logging to Your Own S3 Bucket
* Centralized Umbrella Log Management with Amazon's S3 service for MSP, MSSP, and Multi-org customers
NEW QUESTION # 34
Which technology provides a combination of endpoint protection endpoint detection, and response?
- A. Cisco Umbrella
- B. Cisco AMP
- C. Cisco Talos
- D. Cisco Threat Grid
Answer: B
NEW QUESTION # 35
Which benefit does endpoint security provide the overall security posture of an organization?
- A. It allows the organization to detect and mitigate threats that the perimeter security devices do not detect.
- B. It allows the organization to detect and respond to threats at the edge of the network.
- C. It allows the organization to mitigate web-based attacks as long as the user is active in the domain.
- D. It streamlines the incident response process to automatically perform digital forensics on the endpoint.
Answer: A
NEW QUESTION # 36
Which solution protects hybrid cloud deployment workloads with application visibility and segmentation?
- A. Tetration
- B. Stealthwatch
- C. Nexus
- D. Firepower
Answer: A
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/solutions/security/secure-data-center-solution/index.html#~products
NEW QUESTION # 37
With Cisco AMP for Endpoints, which option shows a list of all files that have been executed in your environment?
- A. Threat root cause
- B. File analysis
- C. Detections
- D. Vulnerable software
- E. Prevalence
Answer: E
Explanation:
Prevalence allows you to view files that have been executed in your deployment.
Note: Threat Root Cause shows how malware is getting onto your computers.
NEW QUESTION # 38
A network administrator needs to find out what assets currently exist on the network. Third-party systems need to be able to feed host data into Cisco Firepower. What must be configured to accomplish this?
- A. a File Analysis policy to send file data into Cisco Firepower
- B. a Network Discovery policy to receive data from the host
- C. a Threat Intelligence policy to download the data from the host
- D. a Network Analysis policy to receive NetFlow data from the host
Answer: B
Explanation:
You can configure discovery rules to tailor the discovery of host and application data to your needs.
The Firepower System can use data from NetFlow exporters to generate connection and discovery events, and to add host and application data to the network map.
A network analysis policy governs how traffic is decoded and preprocessed so it can be further evaluated, especially for anomalous traffic that might signal an intrusion attempt
NEW QUESTION # 39
What must be configured in Cisco ISE to enforce reauthentication of an endpoint session when an endpoint is deleted from an identity group?
- A. CoA
- B. SNMP probe
- C. posture assessment
- D. external identity source
Answer: B
NEW QUESTION # 40
Which feature requires a network discovery policy on the Cisco Firepower Next Generation Intrusion Prevention System?
- A. impact flags
- B. URL filtering
- C. health monitoring
- D. security intelligence
Answer: A
NEW QUESTION # 41
An organization is using Cisco Firepower and Cisco Meraki MX for network security and needs to centrally manage cloud policies across these platforms. Which software should be used to accomplish this goal?
- A. Cisco Secureworks
- B. Cisco Configuration Professional
- C. Cisco Defense Orchestrator
- D. Cisco DNA Center
Answer: C
Explanation:
Cisco Defense Orchestrator is a cloud-based management solution that allows you to manage security policies and device configurations with ease across multiple Cisco and cloud-native security platforms.
Cisco Defense Orchestrator features:
....
Management of hybrid environments: Managing a mix of firewalls running the ASA, FTD, and Meraki MX software is now easy, with the ability to share policy elements across platforms.
Cisco Defense Orchestrator is a cloud-based management solution that allows you to manage security policies and device configurations with ease across multiple Cisco and cloud-native security platforms.
Cisco Defense Orchestrator features:
....
Management of hybrid environments: Managing a mix of firewalls running the ASA, FTD, and Meraki MX software is now easy, with the ability to share policy elements across platforms.
Cisco Defense Orchestrator is a cloud-based management solution that allows you to manage security policies and device configurations with ease across multiple Cisco and cloud-native security platforms.
Cisco Defense Orchestrator features:
....
Management of hybrid environments: Managing a mix of firewalls running the ASA, FTD, and Meraki MX software is now easy, with the ability to share policy elements across platforms.
Reference:
736847.html
736847.html
NEW QUESTION # 42
Which attack is preventable by Cisco ESA but not by the Cisco WSA?
- A. DoS
- B. SQL injection
- C. phishing
- D. buffer overflow
Answer: C
NEW QUESTION # 43
Which policy represents a shared set of features or parameters that define the aspects of a managed device that are likely to be similar to other managed devices in a deployment?
- A. Access Control Policy
- B. Platform Service Policy
- C. Group Policy
- D. Device Management Policy
Answer: B
Explanation:
Cisco Firepower deployments can take advantage of platform settings policies. A platform settings policy is a shared set of features or parameters that define the aspects of a managed device that are likely to be similar to other managed devices in your deployment, such as time settings and external authentication. Examples of these platform settings policies are time and date settings, external authentication, and other common administrative features. A shared policy makes it possible to configure multiple managed devices at once, which provides consistency in your deployment and streamlines your management efforts. Any changes to a platform settings policy affects all the managed devices where you applied the policy. Even if you want different settings per device, you must create a shared policy and apply it to the desired device. For example, your organization's security policies may require that your appliances have a "No Unauthorized Use" message when a user logs in. With platform settings, you can set the login banner once in a platform settings policy. Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-configguide-v62/platform_settings_policies_for_managed_devices.html Therefore the answer should be "Platform Settings Policy", not "Platform Service Policy" but it is the best answer here so we have to choose it.
administrative features.
A shared policy makes it possible to configure multiple managed devices at once, which provides consistency in your deployment and streamlines your management efforts. Any changes to a platform settings policy affects all the managed devices where you applied the policy. Even if you want different settings per device, you must create a shared policy and apply it to the desired device.
For example, your organization's security policies may require that your appliances have a "No Unauthorized Use" message when a user logs in. With platform settings, you can set the login banner once in a platform settings policy.
Reference:
Therefore the answer should be "Platform Settings Policy", not "Platform Service Policy" but it is the best Cisco Firepower deployments can take advantage of platform settings policies. A platform settings policy is a shared set of features or parameters that define the aspects of a managed device that are likely to be similar to other managed devices in your deployment, such as time settings and external authentication. Examples of these platform settings policies are time and date settings, external authentication, and other common administrative features. A shared policy makes it possible to configure multiple managed devices at once, which provides consistency in your deployment and streamlines your management efforts. Any changes to a platform settings policy affects all the managed devices where you applied the policy. Even if you want different settings per device, you must create a shared policy and apply it to the desired device. For example, your organization's security policies may require that your appliances have a "No Unauthorized Use" message when a user logs in. With platform settings, you can set the login banner once in a platform settings policy. Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-configguide-v62/platform_settings_policies_for_managed_devices.html Therefore the answer should be "Platform Settings Policy", not "Platform Service Policy" but it is the best answer here so we have to choose it.
NEW QUESTION # 44
......
Updated 350-701 Certification Exam Sample Questions: https://exams4sure.actualcollection.com/350-701-exam-questions.html