最新的Cisco 350-701免費考試真題

問題1

An engineer is adding a Cisco router to an existing environment. NTP authentication is configured on all devices in the environment with the command ntp authentication-key 1 md5 Clsc427128380. There are two routers on the network that are configured as NTP servers for redundancy, 192.168.1.110 and 192.168.1.111.
192.168.1.110 is configured as the authoritative time source. What command must be configured on the new router to use 192.168.1.110 as its primary time source without the new router attempting to offer time to existing devices?

A. ntp server 192.168.1.110 primary key 1

B. ntp server 192.168.1.110 key 1 prefer

C. ntp peer 192.168.1.110 key 1 primary

D. ntp peer 192.168.1.110 prefer key 1

正確答案: B

說明：（僅 Fast2test 成員可見）

問題2

Which industry standard is used to integrate Cisco ISE and pxGrid to each other and with other interoperable security platforms?

A. IETF

B. ANSI

C. NIST

D. IEEE

正確答案: A

說明：（僅 Fast2test 成員可見）

問題3

What are two advantages of using Cisco Any connect over DMVPN? (Choose two)

A. It allows customization of access policies based on user identity

B. It enables VPN access for individual users from their machines

C. It allows different routing protocols to work over the tunnel

D. It allows multiple sites to connect to the data center

E. It provides spoke-to-spoke communications without traversing the hub

正確答案: A,B

說明：（僅 Fast2test 成員可見）

問題4

A network engineer is trying to figure out whether FlexVPN or DMVPN would fit better in their environment.
They have a requirement for more stringent security multiple security associations for the connections, more efficient VPN establishment as well consuming less bandwidth. Which solution would be best for this and why?

A. FlexVPN because it supports IKEv2 and DMVPN does not

B. FlexVPN because it uses multiple SAs and DMVPN does not

C. DMVPN because it uses multiple SAs and FlexVPN does not

D. DMVPN because it supports IKEv2 and FlexVPN does not

正確答案: B

說明：（僅 Fast2test 成員可見）

問題5

Which type of attack is MFA an effective deterrent for?

A. syn flood

B. teardrop

C. phishing

D. ping of death

正確答案: C

說明：（僅 Fast2test 成員可見）

問題6

What is the difference between EPP and EDR?

A. Having an EDR solution gives an engineer the capability to flag offending files at the first sign of malicious behavior.

B. Having an EPP solution allows an engineer to detect, investigate, and remediate modern threats.

C. EPP focuses primarily on threats that have evaded front-line defenses that entered the environment.

D. EDR focuses solely on prevention at the perimeter.

正確答案: A

說明：（僅 Fast2test 成員可見）

問題7

What must be used to share data between multiple security products?

A. Cisco Platform Exchange Grid

B. Cisco Stealthwatch Cloud

C. Cisco Advanced Malware Protection

D. Cisco Rapid Threat Containment

正確答案: A

說明：（僅 Fast2test 成員可見）

問題8

Which two descriptions of AES encryption are true? (Choose two)

A. AES can use a 168-bit key for encryption.

B. AES is more secure than 3DES.

C. AES can use a 256-bit key for encryption.

D. AES is less secure than 3DES.

E. AES encrypts and decrypts a key three times in sequence.

正確答案: B,C

說明：（僅 Fast2test 成員可見）

問題9

Which feature is configured for managed devices in the device platform settings of the Firepower Management Center?

A. time synchronization

B. intrusion policy

C. quality of service

D. network address translations

正確答案: A

說明：（僅 Fast2test 成員可見）

問題10

How does DNS Tunneling exfiltrate data?

A. An attacker sends an email to the target with hidden DNS resolvers in it to redirect them to a maliciousdomain.

B. An attacker registers a domain that a client connects to based on DNS records and sends malware throughthat connection.

C. An attacker opens a reverse DNS shell to get into the client's system and install malware on it.

D. An attacker uses a non-standard DNS port to gain access to the organization's DNS servers in order topoison the resolutions.

正確答案: B

說明：（僅 Fast2test 成員可見）

問題11

An organization uses Cisco FMC to centrally manage multiple Cisco FTD devices The default management port conflicts with other communications on the network and must be changed What must be done to ensure that all devices can communicate together?

A. Manually change the management port on Cisco FMC and all managed Cisco FTD devices

B. Set the sftunnel to go through the Cisco FTD

C. Change the management port on Cisco FMC so that it pushes the change to all managed Cisco FTD devices

D. Set the sftunnel port to 8305.

正確答案: A

說明：（僅 Fast2test 成員可見）

問題12

Which function is the primary function of Cisco AMP threat Grid?

A. automated malware analysis

B. monitoring network traffic

C. automated email encryption

D. applying a real-time URI blacklist

正確答案: A

說明：（僅 Fast2test 成員可見）

問題13

What is a benefit of an endpoint patch management strategy?

A. Ensures adherence to regulatory and compliance standards.

B. Fewer staff is needed to manage the endpoints.

C. Endpoints are resistant to vulnerabilities.

D. Patches are deployed without a testing phase.

正確答案: A

問題14

An administrator is adding a new Cisco ISE node to an existing deployment. What must be done to ensure that the addition of the node will be successful when inputting the FQDN?

A. Open port 8905 on the firewall between the Cisco ISE nodes

B. Make the new Cisco ISE node a secondary PAN before registering it with the primary.

C. Add the DNS entry for the new Cisco ISE node into the DNS server

D. Change the IP address of the new Cisco ISE node to the same network as the others.

正確答案: C

說明：（僅 Fast2test 成員可見）

最新的Cisco Implementing and Operating Cisco Security Core Technologies - 350-701免費考試真題

聯系我們

站內鏈接

最新更新