Cisco 350-701 Practice Exam Questions

Cisco 350-701 Sample Question Answers

Question # 1

What is the difference between EPP and EDR?

A. EPP focuses primarily on threats that have evaded front-line defenses that entered theenvironment. 
B. Having an EPP solution allows an engineer to detect, investigate, and remediatemodern threats. 
C. EDR focuses solely on prevention at the perimeter. 
D. Having an EDR solution gives an engineer the capability to flag offending files at the firstsign of malicious behavior. 

Show Answer

Question # 2

Cisco Umbrella is a cloud-delivered network security service that provides DNSlayer security, secure web gateway, cloud-delivered firewall, cloud access securitybroker, and threat intelligence3. It does not offer data security features such asDLP, data inspection, and data blocking4.Cisco AppDynamics Cloud Monitoring is a cloud-native application performancemanagement solution that helps you monitor, troubleshoot, and optimize yourcloud applications. It does not offer user security, data security, or app securityfeatures as a CASB solution.Cisco Stealthwatch is a network traffic analysis solution that provides visibility andthreat detection across your network, endpoints, and cloud. It does not offer datasecurity features such as DLP, data inspection, and data blocking.References: 3: Cisco Umbrella Packages - Cisco Umbrella 1: Cisco Cloudlock - Cisco 2:Cisco Cloudlock Cisco Cloudlock: Secure Cloud Data 4: Easy to Deploy & Simple toManage CASB Solution - Cisco Umbrella : Cisco AppDynamics Cloud Monitoring : CiscoStealthwatch - Cisco

A. signature-based endpoint protection on company endpoints 
B. macro-based protection to keep connected endpoints safe 
C. continuous monitoring of all files that are located on connected endpoints 
D. email integration to protect endpoints from malicious content that is located in email 
E. real-time feeds from global threat intelligence centers 

Show Answer

Question # 3

An engineer is trying to decide whether to use Cisco Umbrella, Cisco CloudLock, CiscoStealthwatch, or Cisco AppDynamics Cloud Monitoring for visibility into data transfers aswell as protection against data exfiltration Which solution best meets these requirements?

A. Cisco CloudLock 
B. Cisco AppDynamics Cloud Monitoring 
C. Cisco Umbrella 
D. Cisco Stealthwatch

Show Answer

Question # 4

An engineer needs to detect and quarantine a file named abc424400664 zip based on theMD5 signature of the file using the Outbreak Control list feature within Cisco AdvancedMalware Protection (AMP) for Endpoints The configured detection method must work onfiles of unknown disposition Which Outbreak Control list must be configured to providethis?

A. Blocked Application 
B. Simple Custom Detection 
C. Advanced Custom Detection 
D. Android Custom Detection 

Show Answer

Question # 5

Which Cisco network security device supports contextual awareness?

A. Firepower 
B. CISCO ASA 
C. Cisco IOS 
D. ISE 

Show Answer

Question # 6

An organization uses Cisco FMC to centrally manage multiple Cisco FTD devices. Thedefault managementport conflicts with other communications on the network and must be changed. What mustbe done to ensurethat all devices can communicate together?

A. Manually change the management port on Cisco FMC and all managed Cisco FTD devices
B. Set the tunnel to go through the Cisco FTD
C. Change the management port on Cisco FMC so that it pushes the change to allmanaged Cisco FTD devices
D. Set the tunnel port to 8305 

Show Answer

Question # 7

Which configuration method provides the options to prevent physical and virtual endpoint devices that are in the same base EPG or uSeg from being able to communicate with each other with Vmware VDS or Microsoft vSwitch?

A. inter-EPG isolation 
B. inter-VLAN security 
C. intra-EPG isolation 
D. placement in separate EPGs 

Show Answer

Question # 8

Which role is a default guest type in Cisco ISE?

A. Monthly 
B. Yearly 
C. Contractor 
D. Full-Time

Show Answer

Question # 9

An engineer is implementing DHCP security mechanisms and needs the ability to addadditional attributes to profiles that are created within Cisco ISE Which action accomplishesthis task?

A. Define MAC-to-lP address mappings in the switch to ensure that rogue devices cannotget an IP address 
B. Use DHCP option 82 to ensure that the request is from a legitimate endpoint and sendthe information to Cisco ISE 
C. Modify the DHCP relay and point the IP address to Cisco ISE. 
D. Configure DHCP snooping on the switch VLANs and trust the necessary interfaces

Show Answer

Question # 10

Which threat intelligence standard contains malware hashes?

A. advanced persistent threat 
B. open command and control  
C. structured threat information expression 
D. trusted automated exchange of indicator information

Show Answer