Cisco CCNP Security 350-701 Questions & Answers

• Question 151:

  What is the term for when an endpoint is associated to a provisioning WLAN that is shared with guest access, and the same guest portal is used as the BYOD portal?

  A. single-SSID BYOD

  B. multichannel GUI

  C. dual-SSID BYOD

  D. streamlined access

  Correct Answer: C

• Question 152:

  Which cloud service offering allows customers to access a web application that is being hosted, managed, and maintained by a cloud service provider?

  A. IaC

  B. SaaS

  C. IaaS

  D. PaaS

  Correct Answer: B

• Question 153:

  Why is it important to have a patching strategy for endpoints?

  A. to take advantage of new features released with patches

  B. so that functionality is increased on a faster scale when it is used

  C. so that known vulnerabilities are targeted and having a regular patch cycle reduces risks

  D. so that patching strategies can assist with disabling nonsecure protocols in applications

  Correct Answer: C

• Question 154:

  What is a benefit of flexible NetFlow records?

  A. They are used for security

  B. They are used for accounting

  C. They monitor a packet from Layer 2 to Layer 5

  D. They have customized traffic identification

  Correct Answer: D

  https://confluence.netvizura.com/display/NVUG/Traditional+vs.+Flexible+NetFlow

• Question 155:

  Which solution allows an administrator to provision, monitor, and secure mobile devices on Windows and Mac computers from a centralized dashboard?

  A. Cisco Umbrella

  B. Cisco AMP for Endpoints

  C. Cisco ISE

  D. Cisco Stealthwatch

  Correct Answer: C

• Question 156:

  Which role is a default guest type in Cisco ISE?

  A. Monthly

  B. Yearly

  C. Contractor

  D. Full-Time

  Correct Answer: C

  https://www.cisco.com/c/en/us/td/docs/security/ise/1-4- 1/admin_guide/b_ise_admin_guide_141/b_ise_admin_guide_141_chapter_01110.html

• Question 157:

  How does Cisco AMP for Endpoints provide next-generation protection?

  A. It encrypts data on user endpoints to protect against ransomware.

  B. It leverages an endpoint protection platform and endpoint detection and response.

  C. It utilizes Cisco pxGrid, which allows Cisco AMP to pull threat feeds from threat intelligence centers.

  D. It integrates with Cisco FTD devices.

  Correct Answer: B

• Question 158:

  Which open source tool does Cisco use to create graphical visualizations of network telemetry on Cisco IOS XE devices?

  A. InfluxDB

  B. Splunk

  C. SNMP

  D. Grafana

  Correct Answer: D

• Question 159:

  A Cisco ISE engineer configures Central Web Authentication (CWA) for wireless guest access and must have the guest endpoints redirect to the guest portal for authentication and authorization. While testing the policy, the engineer notices that the device is not redirected and instead gets full guest access. What must be done for the redirect to work?

  A. Tag the guest portal in the CWA part of the Common Tasks section of the authorization profile for the authorization policy line that the unauthenticated devices hit.

  B. Use the track movement option within the authorization profile for the authorization policy line that the unauthenticated devices hit.

  C. Create an advanced attribute setting of Cisco:cisco-gateway-id=guest within the authorization profile for the authorization policy line that the unauthenticated devices hit.

  D. Add the DACL name for the Airespace ACL configured on the WLC in the Common Tasks section of the authorization profile for the authorization policy line that the unauthenticated devices hit.

  Correct Answer: A

• Question 160:

  An administrator is adding a new Cisco ISE node to an existing deployment. What must be done to ensure that the addition of the node will be successful when inputting the FQDN?

  A. Change the IP address of the new Cisco ISE node to the same network as the others.

  B. Make the new Cisco ISE node a secondary PAN before registering it with the primary.

  C. Open port 8905 on the firewall between the Cisco ISE nodes

  D. Add the DNS entry for the new Cisco ISE node into the DNS server

  Correct Answer: D