Cisco CCNP Security 350-701 Questions & Answers

• Question 251:

  Which two parameters are used for device compliance checks? (Choose two.)

  A. endpoint protection software version

  B. Windows registry values

  C. DHCP snooping checks

  D. DNS integrity checks

  E. device operating system version

  Correct Answer: BE

• Question 252:

  Which Talos reputation center allows for tracking the reputation of IP addresses for email and web traffic?

  A. IP and Domain Reputation Center

  B. File Reputation Center

  C. IP Slock List Center

  D. AMP Reputation Center

  Correct Answer: A

• Question 253:

  Which baseline form of telemetry is recommended for network infrastructure devices?

  A. SDNS

  B. NetFlow

  C. passive taps

  D. SNMP

  Correct Answer: B

• Question 254:

  An organization must add new firewalls to its infrastructure and wants to use Cisco ASA or Cisco FTD.

  The chosen firewalls must provide methods of blocking traffic that include offering the user the option to bypass the block for certain sites after displaying a warning page and to reset the connection. Which solution should the organization choose?

  A. Cisco FTD because it supports system rate level traffic blocking, whereas Cisco ASA does not

  B. Cisco ASA because it allows for interactive blocking and blocking with reset to be configured via the GUI, whereas Cisco FTD does not.

  C. Cisco FTD because it enables interactive blocking and blocking with reset natively, whereas Cisco ASA does not

  D. Cisco ASA because it has an additional module that can be installed to provide multiple blocking capabilities, whereas Cisco FTD does not.

  Correct Answer: C

• Question 255:

  A network engineer has configured a NTP server on a Cisco ASA. The Cisco ASA has IP reachability to the NTP server and is not filtering any traffic. The show ntp association detail command indicates that the configured NTP server is unsynchronized and has a stratum of 16. What is the cause of this issue?

  A. Resynchronization of NTP is not forced

  B. NTP is not configured to use a working server.

  C. An access list entry for UDP port 123 on the inside interface is missing.

  D. An access list entry for UDP port 123 on the outside interface is missing.

  Correct Answer: B

• Question 256:

  How does Cisco Workload Optimization Manager help mitigate application performance issues?

  A. It deploys an AWS Lambda system

  B. It automates resource resizing

  C. It optimizes a flow path

  D. It sets up a workload forensic score

  Correct Answer: B

  Reference: https://www.cisco.com/c/dam/en/us/solutions/collateral/data-center- virtualization/one-enterprisesuite/solution-overview-c22-739078.pdf

• Question 257:

  What are two ways that Cisco Container Platform provides value to customers who utilize cloud service providers? (Choose two.)

  A. Allows developers to create code once and deploy to multiple clouds

  B. helps maintain source code for cloud deployments

  C. manages Docker containers

  D. manages Kubernetes clusters

  E. Creates complex tasks for managing code

  Correct Answer: AD

  https://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/intersight/ccp-iks-eol.html

• Question 258:

  What is a benefit of using Cisco Tetration?

  A. It collects telemetry data from servers and then uses software sensors to analyze flow information.

  B. It collects policy compliance data and process details.

  C. It collects enforcement data from servers and collects interpacket variation.

  D. It collects near-real time data from servers and inventories the software packages that exist on servers.

  Correct Answer: A

• Question 259:

  Email security has become a high priority task for a security engineer at a large multi- national organization due to ongoing phishing campaigns. To help control this, the engineer has deployed an Incoming Content Filter with a URL reputation of (-10 00 to -6 00) on the Cisco ESA.

  Which action will the system perform to disable any links in messages that match the filter?

  A. Defang

  B. Quarantine

  C. FilterAction

  D. ScreenAction

  Correct Answer: B

  Reference: https://www.cisco.com/c/dam/en/us/products/collateral/security/esa-contentfilters.pdf

• Question 260:

  Which service allows a user export application usage and performance statistics with Cisco Application Visibility and control?

  A. SNORT

  B. NetFlow

  C. SNMP

  D. 802.1X

  Correct Answer: B

  Application Visibility and control (AVC) supports NetFlow to export application usage and performancestatistics. This data can be used for analytics, billing, and security policies.