Cisco CCNP Security 350-701 Questions & Answers

• Question 141:

  Which open standard creates a framework for sharing threat intelligence in a machine-digestible format?

  A. OpenC2

  B. OpenlOC

  C. CybOX

  D. STIX

  Correct Answer: B

• Question 142:

  Which kind of API that is used with Cisco DNA Center provisions SSIDs, QoS policies, and update software versions on switches?

  A. Integration

  B. Intent

  C. Event

  D. Multivendor

  Correct Answer: B

  Cisco is moving towards intent based networking and DNA center is a new addition to the solution offerings from Cisco.

• Question 143:

  Refer to the exhibit.

  

  How does Cisco Umbrella manage traffic that is directed toward risky domains?

  A. Traffic is proximed through the intelligent proxy.

  B. Traffic is managed by the security settings and blocked.

  C. Traffic is managed by the application settings, unhandled and allowed.

  D. Traffic is allowed but logged.

  Correct Answer: B

• Question 144:

  What is the process In DevSecOps where all changes In the central code repository are merged and synchronized?

  A. CD

  B. EP

  C. CI

  D. QA

  Correct Answer: C

• Question 145:

  Which endpoint protection and detection feature performs correlation of telemetry, files, and intrusion events that are flagged as possible active breaches?

  A. retrospective detection

  B. indication of compromise

  C. file trajectory

  D. elastic search

  Correct Answer: B

• Question 146:

  What is an advantage of the Cisco Umbrella roaming client?

  A. the ability to see all traffic without requiring TLS decryption

  B. visibility into IP-based threats by tunneling suspicious IP connections

  C. the ability to dynamically categorize traffic to previously uncategorized sites

  D. visibility into traffic that is destined to sites within the office environment

  Correct Answer: B

  These clients protect users from connections to malicious destinations and command-and-control callbacks at the DNS and IP layers, no matter where the device connects to the internet.

  https://umbrella.cisco.com/blog/secure-remote-workers-with-the-cisco-umbrella-roaming-client#:~:text=By%20using%20the%20Umbrella%20roaming,devices%20with%20device%2Dlevel%20reporting.

• Question 147:

  An engineer is configuring their router to send NetfFow data to Stealthwatch which has an IP address of 1.1.1.1 using the flow record Stealthwatch406143794 command. Which additional command is required to complete the flow record?

  A. transport udp 2055

  B. match ipv4 ttl

  C. cache timeout active 60

  D. destination 1.1.1.1

  Correct Answer: B

  https://www.cisco.com/c/dam/en/us/td/docs/security/stealthwatch/netflow/config-trouble-netflow-stealth.pdf

• Question 148:

  Which statement describes a serverless application?

  A. The application delivery controller in front of the server farm designates on which server the application runs each time.

  B. The application runs from an ephemeral, event-triggered, and stateless container that is fully managed by a cloud provider.

  C. The application is installed on network equipment and not on physical servers.

  D. The application runs from a containerized environment that is managed by Kubernetes or Docker Swarm.

  Correct Answer: B

• Question 149:

  What must be enabled to secure SaaS-based applications?

  A. modular policy framework

  B. two-factor authentication

  C. application security gateway

  D. end-to-end encryption

  Correct Answer: B

• Question 150:

  Which feature enables a Cisco ISR to use the default bypass list automatically for web filtering?

  A. filters

  B. group key

  C. company key

  D. connector

  Correct Answer: D