350-701: Implementing and Operating Cisco Security Core Technologies

Which feature requires a network discovery policy on the Cisco Firepower Next Generation Intrusion Prevention System?

security intelligence
impact flags
health monitoring
URL filtering

Correct answer: A

Which policy is used to capture host information on the Cisco Firepower Next Generation Intrusion Prevention System?

correlation
intrusion
access control
network discovery

Correct answer: D

Refer to the exhibit. Which command was used to generate this output and to show which ports are authenticating with dot1x or mab?

show authentication registrations
show authentication method
show dot1x all
show authentication sessions

Correct answer: B

Which policy represents a shared set of features or parameters that define the aspects of a managed device that are likely to be similar to other managed devices in a deployment?

group policy
access control policy
device management policy
platform service policy

Correct answer: D

Explanation:

Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/622/configuration/guide/fpmc-config-guide-v622/platform_settings_policies_for_managed_devices.pdf

An administrator wants to ensure that all endpoints are compliant before users are allowed access on the corporate network. The endpoints must have the corporate antivirus application installed and be running the latest build of Windows 10. What must the administrator implement to ensure that all devices are compliant before they are allowed on the network?

Cisco Identity Services Engine and AnyConnect Posture module
Cisco Stealthwatch and Cisco Identity Services Engine integration
Cisco ASA firewall with Dynamic Access Policies configured
Cisco Identity Services Engine with PxGrid services enabled

Correct answer: A

Explanation:

Reference: https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect46/administration/guide/b_AnyConnect_Administrator_Guide_4-6/configure-posture.html

In which form of attack is alternate encoding, such as hexadecimal representation, most often observed?

smurf
distributed denial of service
cross-site scripting
rootkit exploit

Correct answer: C

Which two conditions are prerequisites for stateful failover for IPsec? (Choose two.)

Only the IKE configuration that is set up on the active device must be duplicated on the standby device; the IPsec configuration is copied automatically.
The active and standby devices can run different versions of the Cisco IOS software but must be the same type of device.
The IPsec configuration that is set up on the active device must be duplicated on the standby device.
Only the IPsec configuration that is set up on the active device must be duplicated on the standby device; the IKE configuration is copied automatically.
The active and standby devices must run the same version of the Cisco IOS software and must be the same type of device.

Correct answer: BC

Explanation:

Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_vpnav/configuration/15-mt/sec-vpn-availability-15-mt-book/sec-state-fail-ipsec.html

When web policies are configured in Cisco Umbrella, what provides the ability to ensure that domains are blocked when they host malware, command and control, phishing, and more threats?

Application Control
Security Category Blocking
Content Category Blocking
File Analysis

Correct answer: B

Explanation:

Reference: https://support.umbrella.com/hc/en-us/articles/115004563666-Understanding-Security-Categories

What two mechanisms are used to redirect users to a web portal to authenticate to ISE for guest services? (Choose two.)

TACACS+
central web auth
single sign-on
multiple factor auth
local web auth

Correct answer: BE

Explanation:

Reference: https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_01110.html

Which flaw does an attacker leverage when exploiting SQL injection vulnerabilities?

user input validation in a web page or web application
Linux and Windows operating systems
database
web page images

Correct answer: C

Explanation:

Reference: https://tools.cisco.com/security/center/resources/sql_injection

Vendor:	Cisco
Exam Code:	350-701
Exam Name:	Implementing and Operating Cisco Security Core Technologies
Date:	Mar 05, 2020
File Size:	719 KB

Download Implementing and Operating Cisco Security Core Technologies.350-701.TestKing.2020-03-05.61q.vcex

How to open VCEX files?

Demo Questions

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

ProfExam at a 20% markdown