Released Cisco 350-701 Updated Questions PDF [Q151-Q171]

NEW QUESTION 151
An organization uses Cisco FMC to centrally manage multiple Cisco FTD devices. The default management port conflicts with other communications on the network and must be changed. What must be done to ensure that all devices can communicate together?

Manually change the management port on Cisco FMC and all managed Cisco FTD devices

Set the tunnel to go through the Cisco FTD

Change the management port on Cisco FMC so that it pushes the change to all managed Cisco FTDdevices

Set the tunnel port to 8305

NEW QUESTION 152
Refer to the exhibit.

Which command was used to generate this output and to show which ports are authenticating with dot1x or mab?

show authentication registrations

show authentication method

show dot1x all

show authentication sessions

NEW QUESTION 153
Drag and drop the threats from the left onto examples of that threat on the right

NEW QUESTION 154
Which type of dashboard does Cisco DNA Center provide for complete control of the network?

service management

centralized management

application management

distributed management

NEW QUESTION 155
Which two cryptographic algorithms are used with IPsec? (Choose two)

AES-BAC

AES-ABC

HMAC-SHA1/SHA2

Triple AMC-CBC

AES-CBC

NEW QUESTION 156
A network administrator is configuring a role in an access control policy to block certain URLs and selects the
“Chat and instant Messaging” category. which reputation score should be selected to accomplish this goal?

3

5

10

1

NEW QUESTION 157
Which two conditions are prerequisites for stateful failover for IPsec? (Choose two)

Only the IKE configuration that is set up on the active device must be duplicated on the standby device; the IPsec configuration is copied automatically

The active and standby devices can run different versions of the Cisco IOS software but must be the same type of device.

The IPsec configuration that is set up on the active device must be duplicated on the standby device

Only the IPsec configuration that is set up on the active device must be duplicated on the standby device; the IKE configuration is copied automatically.

The active and standby devices must run the same version of the Cisco IOS software and must be the same type of device

NEW QUESTION 158
Which two are valid suppression types on a Cisco Next Generation Intrusion Prevention System? (Choose two)

Port

Rule

Source

Application

Protocol

NEW QUESTION 159
Drag and drop the cloud security assessment components from the left onto the definitions on the right.

NEW QUESTION 160
Drag and drop the Firepower Next Generation Intrustion Prevention System detectors from the left onto the correct definitions on the right.

NEW QUESTION 161
What are two DDoS attack categories? (Choose two.)

sequential

protocol

database

volume-based

scree-based

NEW QUESTION 162
Drag and drop the common security threats from left onto the definitions on the right.

NEW QUESTION 163
What is the Cisco API-based broker that helps reduce compromises, application risks, and data breaches in an environment that is not on-premise?

Cisco Cloudlock

Cisco Umbrella

Cisco AMP

Cisco App Dynamics

NEW QUESTION 164
What is the purpose of the Decrypt for Application Detection feature within the WSA Decryption options?

It decrypts HTTPS application traffic for unauthenticated users.

It alerts users when the WSA decrypts their traffic.

It decrypts HTTPS application traffic for authenticated users.

It provides enhanced HTTPS application detection for AsyncOS.

NEW QUESTION 165
Which feature is used to restrict communication between interfaces on a Cisco ASA?

VLAN subinterfaces

Traffic zones

Security levels

VxLAN interfaces

NEW QUESTION 166
Drag and drop the capabilities from the left onto the correct technologies on the right.

NEW QUESTION 167
Which network monitoring solution uses streams and pushes operational data to provide a near real-time view of activity?

SNMP

SMTP

syslog

model-driven telemetry

NEW QUESTION 168
Which ESA implementation method segregates inbound and outbound email?

one listener on a single physical Interface

pair of logical listeners on a single physical interface with two unique logical IPv4 addresses and one IPv6 address

pair of logical IPv4 listeners and a pair Of IPv6 listeners on two physically separate interfaces

one listener on one logical IPv4 address on a single logical interface

ESA stands for Email Security Appliance, which is a Cisco product that provides comprehensive email security solutions. ESA can be deployed in different modes, such as gateway, hybrid, or cloud, depending on the customer’s needs and preferences. One of the key components of ESA configuration is the listener, which is a service that listens for incoming SMTP connections on a specific port and interface. A listener can be configured to handle inbound or outbound email, or both, depending on the mail flow policies and sender groups that are applied to it.
One way to segregate inbound and outbound email on ESA is to use a pair of logical listeners on a single physical interface with two unique logical IPv4 addresses and one IPv6 address. This method allows the ESA to have two separate listeners for inbound and outbound email, each with its own IP address and mail flow policies, while using the same physical interface and port. This can simplify the network configuration and reduce the hardware requirements for ESA deployment. The IPv6 address can be used to support dual-stack IPv4 and IPv6 environments, or to provide redundancy in case of IPv4 address exhaustion.
The other options are incorrect because:
* A is false, as one listener on a single physical interface cannot segregate inbound and outbound email, unless it uses different sender groups and mail flow policies for different hosts, which is not a recommended practice.
* C is false, as pair of logical IPv4 listeners and a pair of IPv6 listeners on two physically separate interfaces is an unnecessary and complex configuration that does not provide any additional benefits over option B.
* D is false, as one listener on one logical IPv4 address on a single logical interface cannot segregate inbound and outbound email, unless it uses different sender groups and mail flow policies for different hosts, which is not a recommended practice.
References:
* ESA Outbound Traffic Relay Configuration Example
* How do I configure a relay host on the ESA for outbound mail?
* [Implementing and Operating Cisco Security Core Technologies (SCOR) v1.0] – Module 5: Securing Email with Cisco Email Security Appliance, Lesson 5.1: Describing the Cisco Email Security Solution

NEW QUESTION 169
Drag and drop the capabilities from the left onto the correct technologies on the right.

NEW QUESTION 170
What is provided by the Secure Hash Algorithm in a VPN?

integrity

key exchange

encryption

authentication

NEW QUESTION 171
Which two behavioral patterns characterize a ping of death attack? (Choose two)

The attack is fragmented into groups of 16 octets before transmission.

The attack is fragmented into groups of 8 octets before transmission.

Short synchronized bursts of traffic are used to disrupt TCP connections.

Malformed packets are used to crash systems.

Publicly accessible DNS servers are typically used to execute the attack.

Released Cisco 350-701 Updated Questions PDF [Q151-Q171]

Leave a Reply Cancel reply

Related Posts

The Best Practice Test Preparation for the 350-701 Certification Exam [Q25-Q42]

[Dec 03, 2024] Download Free Cisco 300-425 Real Exam Questions [Q18-Q39]

350-401 Exam Dumps Pass with Updated Dec-2022 Tests Dumps [Q130-Q150]