Cisco CCNP Security 350-701 Questions & Answers

• Question 171:

  Which type of encryption uses a public key and private key?

  A. Asymmetric

  B. Symmetric

  C. Linear

  D. Nonlinear

  Correct Answer: A

• Question 172:

  What is a feature of container orchestration?

  A. ability to deploy Amazon ECS clusters by using the Cisco Container Platform data plane

  B. ability to deploy Amazon EKS clusters by using the Cisco Container Platform data plane

  C. ability to deploy Kubernetes clusters in air-gapped sites

  D. automated daily updates

  Correct Answer: C

• Question 173:

  A hacker initiated a social engineering attack and stole username and passwords of some users within a company. Which product should be used as a solution to this problem?

  A. Cisco NGFW

  B. Cisco AnyConnect

  C. Cisco AMP for Endpoints

  D. Cisco Duo

  Correct Answer: D

• Question 174:

  Which solution supports high availability in routed or transparent mode as well as in northbound and southbound deployments?

  A. Cisco FTD with Cisco ASDM

  B. Cisco FTD with Cisco FMC

  C. Cisco Firepower NGFW physical appliance with Cisco. FMC

  D. Cisco Firepower NGFW Virtual appliance with Cisco FMC

  Correct Answer: B

• Question 175:

  How does Cisco Umbrella protect clients when they operate outside of the corporate network?

  A. by modifying the registry for DNS lookups

  B. by using Active Directory group policies to enforce Cisco Umbrella DNS servers

  C. by using the Cisco Umbrella roaming client

  D. by forcing DNS queries to the corporate name servers

  Correct Answer: C

• Question 176:

  An organization configures Cisco Umbrella to be used for its DNS services. The organization must be able to block traffic based on the subnet that the endpoint is on but it sees only the requests from its public IP address instead of each internal IP address. What must be done to resolve this issue?

  A. Set up a Cisco Umbrella virtual appliance to internally field the requests and see the traffic of each IP address

  B. Use the tenant control features to identify each subnet being used and track the connections within the Cisco Umbrella dashboard

  C. Install the Microsoft Active Directory Connector to give IP address information stitched to the requests in the Cisco Umbrella dashboard

  D. Configure an internal domain within Cisco Umbrella to help identify each address and create policy from the domains

  Correct Answer: A

• Question 177:

  Which function is included when Cisco AMP is added to web security?

  A. multifactor, authentication-based user identity

  B. detailed analytics of the unknown file's behavior

  C. phishing detection on emails D. threat prevention on an infected endpoint

  Correct Answer: B

• Question 178:

  Which Cisco DNA Center Intent API action is used to retrieve the number of devices known to a DNA Center?

  A. GET https://fqdnOrlPofDnaCenterPlatform/dna/intent/api/v1/network-device/count

  B. GET https://fqdnOrlPofDnaCenterPlatform/dna/intent/api/v1/network-device

  C. GET https://fqdnOrlPofDnaCenterPlatform/dna/intent/api/v1/networkdevice?parameter1=valueand parameter2=valueand....

  D. GET https://fqdnOrlPofDnaCenterPlatform/dna/intent/api/v 1/networkdevice/startIndex/recordsToReturn

  Correct Answer: A

• Question 179:

  Which Cisco cloud security software centrally manages policies on multiple platforms such as Cisco ASA, Cisco Firepower, Cisco Meraki, and AWS?

  A. Cisco Defense Orchestrator

  B. Cisco Configuration Professional

  C. Cisco Secureworks

  D. Cisco DNAC

  Correct Answer: A

• Question 180:

  Which IETF attribute is supported for the RADIUS CoA feature?

  A. 24 State

  B. 30 Calling-Station-ID

  C. 42 Acct-Session-ID

  D. 81 Message-Authenticator

  Correct Answer: A