Cisco CCNP Security 350-701 Questions & Answers

• Question 101:

  DRAG DROP

  Drag and drop the solutions from the left onto the solution's benefits on the right.

  Select and Place:

  

  Correct Answer:

  

  Cisco Stealthwatch - rapidly collects and analyzes netflow and telementy data to deliver in-depth visibility and understanding of network traffic Cisco ISE -obtains contextual identity and profiles for all users and device Cisco TrustSec -software defined segmentation that uses SGTs Cisco Umbrella -secure internet gateway ion the cloud that provides a security solution

• Question 102:

  DRAG DROP

  Drag and drop the NetFlow export formats from the left onto the descriptions on the right.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2015/pdf/BRKNMS-3132.pdf

• Question 103:

  DRAG DROP

  Drag and drop the common security threats from the left onto the definitions on the right.

  Select and Place:

  

  Correct Answer:

  

• Question 104:

  DRAG DROP

  Drag and drop the threats from the left onto examples of that threat on the right.

  Select and Place:

  

  Correct Answer:

  

  A data breach is the intentional or unintentional release of secure or private/confidential information to anuntrusted environment.When your credentials have been compromised, it means someone other than you may be in possession of your account information, such as your username and/or password.

• Question 105:

  DRAG DROP

  Drag and drop the VPN functions from the left onto the description on the right.

  Select and Place:

  

  Correct Answer:

  

  The purpose of message integrity algorithms, such as Secure Hash Algorithm (SHA-1), ensures data has notbeen changed in transit. They use one way hash functions to determine if data has been changed.SHA-1, which is also known as HMAC-SHA-1 is a strong cryptographic hashing algorithm, stronger thananother popular algorithm known as Message Digest 5 (MD5). SHA-1 is used to provide data integrity (toguarantee data has not been altered in transit) and authentication (to guarantee data came from the source itwas supposed to come from). SHA was produced to be used with the digital signature standard.A VPN uses groundbreaking 256-bit AES encryption technology to secure your online connection againstcyberattacks that can compromise your security. It also offers robust protocols to combat malicious attacks and reinforce your online identity.IKE SAs describe the security parameters between two IKE devices, the first stage in establishing IPSec

• Question 106:

  DRAG DROP

  Drag and drop the capabilities of Cisco Firepower versus Cisco AMP from the left into the appropriate category on the right.

  Select and Place:

  

  Correct Answer:

  

  Description automatically generated with low confidence ExplanationThe Firepower System uses network discovery and identity policies to collect host, application, and user data for traffic on your network. You can use certain types of discovery and identity data to build a comprehensive map of your network assets, perform forensic analysis, behavioral profiling, access control, and mitigate and respond to the vulnerabilities and exploits to which your organization is susceptible.The Cisco Advanced Malware Protection (AMP) solution enables you to detect and block malware, continuously analyze for malware, and get retrospective alerts. AMP for Networks delivers network- based advanced malware protection that goes beyond point-in-time detection to protect your organization across the entire attack continuum ?before, during, and after an attack. Designed for Cisco Firepower?network threat appliances, AMP for Networks detects, blocks, tracks, and contains malware threats across multiple threat vectors within a single system. It also provides the visibility and control necessary to protect your organization against highly sophisticated, targeted, zero-day, and persistent advanced malware threats.

• Question 107:

  DRAG DROP

  Drag and drop the suspicious patterns for the Cisco Tetration platform from the left onto the correct definitions on the righ.

  Select and Place:

  

  Correct Answer:

  

  Privilege escalation: Watches for privilege changes from a lower privilege to a higher privilege in the process lineage tree.

  User login suspicious behavior: Cisco Secure Workload platform watches user login failures and user login methods.

  Interesting file access: Cisco Secure Workload platform can be armed to look at sensitive files.

  File access from a different user: Cisco Secure Workload platform learns the normal behavior of which file is accessed by which user.

  https://www.cisco.com/c/en/us/products/collateral/data-center-analytics/tetration-analytics/white-paper-c11-740380.html

• Question 108:

  DRAG DROP

  Drag and drop the descriptions from the left onto the correct protocol versions on the right.

  Select and Place:

  

  Correct Answer:

  

• Question 109:

  DRAG DROP

  Drag and drop the steps from the left into the correct order on the right to enable AppDynamics to monitor an EC2 instance in Amazon Web Services.

  Select and Place:

  

  Correct Answer:

  

• Question 110:

  DRAG DROP

  Drag and drop the descriptions from the left onto the encryption algorithms on the right.

  Select and Place:

  

  Correct Answer:

  

  Asymmetric: Diffie-Hellman exchange and requires more time

  The Diffie-Hellman key exchange algorithm is an example of asymmetric encryption. In this algorithm, two parties generate their own public and private keys and exchange public keys. Each party then uses their own private key and the other party's public key to generate a shared secret key that can be used for symmetric encryption.

  The process of generating and exchanging public keys in the Diffie-Hellman algorithm does require more time compared to symmetric encryption, where both parties use the same key for encryption and decryption. However, the security benefits of using asymmetric encryption for key exchange, such as protection against eavesdropping and man-in-the-middle attacks, make it a widely used and trusted method for secure communication.

  Symmetric: 3DES and requires secret keys

  Triple Data Encryption Standard (3DES) is an example of symmetric encryption, where both parties use the same secret key for encryption and decryption. In 3DES, each block of plaintext is encrypted three times using three different keys derived from the original secret key. This provides a higher level of security compared to the original Data Encryption Standard (DES), which uses a single key for encryption and decryption.

  Symmetric encryption algorithms like 3DES require secret keys that are kept secret from anyone who is not authorized to access the encrypted data. The security of the encryption relies on the secrecy and complexity of the key used for encryption and decryption.