Cisco CCNP Security 350-701 Questions & Answers

• Question 91:

  Which Cisco WSA feature supports access control using URL categories?

  A. transparent user identification

  B. SOCKS proxy services

  C. web usage controls

  D. user session restrictions

  Correct Answer: C

• Question 92:

  What are two advantages of using Cisco Any connect over DMVPN? (Choose two)

  A. It provides spoke-to-spoke communications without traversing the hub

  B. It allows different routing protocols to work over the tunnel

  C. It allows customization of access policies based on user identity

  D. It allows multiple sites to connect to the data center

  E. It enables VPN access for individual users from their machines

  Correct Answer: CE

  Cisco Anyconnect is a Remote access VPN client based solution where users can install the client on their machines and can connect to the respective VPN devices (ASA/FTD/Router). In order to secure connectivity for Anyconnect Users, one can also create custom access policies to ensure proper conditions are met before access is granted to the VPN user.

• Question 93:

  What are two functionalities of northbound and southbound APIs within Cisco SDN architecture? (Choose two.)

  A. Southbound APIs are used to define how SDN controllers integrate with applications.

  B. Southbound interfaces utilize device configurations such as VLANs and IP addresses.

  C. Northbound APIs utilize RESTful API methods such as GET, POST, and DELETE.

  D. Southbound APIs utilize CLI, SNMP, and RESTCONF.

  E. Northbound interfaces utilize OpenFlow and OpFlex to integrate with network devices.

  Correct Answer: CD

  https://www.cisco.com/c/dam/global/sr_rs/training-events/2016/cisco-day-2016/pdf/APIC-EM_Vedran_Hafner.pdf

• Question 94:

  DRAG DROP

  Drag and drop the cryptographic algorithms for IPsec from the left onto the cryptographic processes on the right.

  Select and Place:

  

  Correct Answer:

  

• Question 95:

  DRAG DROP

  Drag and drop the security solutions from the left onto the benefits they provide on the right.

  Select and Place:

  

  Correct Answer:

  

• Question 96:

  DRAG DROP

  Drag and drop the deployment models from the left onto the corresponding explanations on the right.

  Select and Place:

  

  Correct Answer:

  

• Question 97:

  DRAG DROP A network engineer is configuring NetFlow top talkers on a Cisco router Drag and drop the steps in the process from the left into the sequence on the right

  Select and Place:

  

  Correct Answer:

  

• Question 98:

  DRAG DROP

  Drag and drop the Cisco CWS redirection options from the left onto the capabilities on the right.

  Select and Place:

  

  Correct Answer:

  

• Question 99:

  DRAG DROP Refer to the exhibit.

  

  An engineer must configure a Cisco switch to perform PPP authentication via a TACACS server located at IP address 10.1.1.10. Authentication must fall back to the local database using the username LocalUser and password C1$c0445915422! if TACACS server is unreachable.

  Drag and drop the commands from the left onto the corresponding configuration steps on the right.

  Select and Place:

  

  Correct Answer:

  

• Question 100:

  DRAG DROP

  Drag and drop the cloud security assessment components from the left onto the definitions on the right.

  Select and Place:

  

  Correct Answer: