Cisco CCNP Security 350-701 Questions & Answers

• Question 261:

  What is the benefit of integrating Cisco ISE with a MDM solution?

  A. It provides compliance checks for access to the network

  B. It provides the ability to update other applications on the mobile device

  C. It provides the ability to add applications to the mobile device through Cisco ISE

  D. It provides network device administration access

  Correct Answer: A

  https://www.cisco.com/c/en/us/td/docs/security/ise/2- 4/admin_guide/b_ISE_admin_guide_24/m_ise_interoperability_mdm.html

• Question 262:

  Using Cisco Cognitive Threat Analytics, which platform automatically blocks risky sites, and test unknown sites for hidden advanced threats before allowing users to click them?

  A. Cisco Identity Services Engine

  B. Cisco Enterprise Security Appliance

  C. Cisco Web Security Appliance

  D. Cisco Advanced Stealthwatch Appliance

  Correct Answer: C

• Question 263:

  Which two components do southbound APIs use to communicate with downstream devices? (Choose two.)

  A. services running over the network

  B. OpenFlow

  C. external application APIs

  D. applications running over the network

  E. OpFlex

  Correct Answer: BE

• Question 264:

  Which characteristic is unique to a Cisco WSAv as compared to a physical appliance?

  A. supports VMware vMotion on VMware ESXi

  B. requires an additional license

  C. performs transparent redirection

  D. supports SSL decryption

  Correct Answer: B

• Question 265:

  Which Cisco security solution integrates with cloud applications like Dropbox and Office 365 while protecting data from being exfiltrated?

  A. Cisco Tajos

  B. Cisco Steaithwatch Cloud

  C. Cisco Cloudlock

  D. Cisco Umbrella Investigate

  Correct Answer: C

• Question 266:

  Which encryption algorithm provides highly secure VPN communications?

  A. 3DES

  B. AES 256

  C. AES 128

  D. DES

  Correct Answer: B

• Question 267:

  What are two benefits of using an MDM solution? (Choose two.)

  A. grants administrators a way to remotely wipe a lost or stolen device

  B. provides simple and streamlined login experience for multiple applications and users

  C. native integration that helps secure applications across multiple cloud platforms or on- premises environments

  D. encrypts data that is stored on endpoints

  E. allows for centralized management of endpoint device applications and configurations

  Correct Answer: AE

• Question 268:

  What is a difference between Cisco AMP for Endpoints and Cisco Umbrella?

  A. Cisco AMP for Endpoints is a cloud-based service, and Cisco Umbrella is not.

  B. Cisco AMP for Endpoints prevents connections to malicious destinations, and Cisco Umbrella works at the file level to prevent the initial execution of malware

  C. Cisco AMP for Endpoints automatically researches indicators of compromise and confirms threats and Cisco Umbrella does not

  D. Cisco AMP for Endpoints prevents, detects, and responds to attacks before damage can be done, and Cisco Umbrella provides the first line of defense against Internet threats

  Correct Answer: D

  https://learn-umbrella.cisco.com/i/802005-umbrella-security-report/3? https://www.cisco.com/site/us/en/products/security/endpoint-security/secure- endpoint/index.html#:~:text=Powerful%20EDR%20capabilities,from%20Kenna%20Security . Cisco Advanced Malware Protection (AMP) for endpoints can be seen as a replacement for the traditional antivirus solution. It is a next generation, cloud delivered endpoint protection platform (EPP), and advanced endpoint detection and response (EDR). Providing Protection ?Detection Response While Cisco Umbrella can enforce security at the DNS-, IP-, and HTTP/S-layer, this report does not require that blocking is enabled and only monitors your DNS activity. Any malicious domains requested and IPs resolved are indicators of compromise (IOC). Any malicious domains requested and IPs resolved are indicators of compromise (IOC)

• Question 269:

  What are two ways a network administrator transparently identifies users using Active Directory on the Cisco WSA? (Choose two.)

  A. Create an LDAP authentication realm and disable transparent user identification.

  B. Create NTLM or Kerberos authentication realm and enable transparent user identification.

  C. Deploy a separate Active Directory agent such as Cisco Context Directory Agent.

  D. The eDirectory client must be installed on each client workstation.

  E. Deploy a separate eDirectory server; the dent IP address is recorded in this server.

  Correct Answer: BC

  Transparently identify users with authentication realms – This option is available when one or more authentication realms are configured to support transparent identification using one of the following authentication servers:

  Active Directory – Create an NTLM or Kerberos authentication realm and enable transparent user identification. In addition, you must deploy a separate Active Directory agent such as Cisco's Context Directory Agent. For more information,

  see Transparent User Identification with Active Directory.

  LDAP – Create an LDAP authentication realm configured as an eDirectory, and enable transparent user identification. For more information, see Transparent User Identification with LDAP.

  https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-0/user_guide/b_WSA_UserGuide/b_WSA_UserGuide_chapter_01001.html#con_1442362

• Question 270:

  An organization wants to use Cisco FTD or Cisco ASA devices. Specific URLs must be blocked from being accessed via the firewall which requires that the administrator input the bad URL categories that the organization wants blocked into the access policy. Which solution should be used to meet this requirement?

  A. Cisco ASA because it enables URL filtering and blocks malicious URLs by default, whereas Cisco FTD does not

  B. Cisco ASA because it includes URL filtering in the access control policy capabilities, whereas Cisco FTD does not

  C. Cisco FTD because it includes URL filtering in the access control policy capabilities, whereas Cisco ASA does not

  D. Cisco FTD because it enables URL filtering and blocks malicious URLs by default, whereas Cisco ASA does not

  Correct Answer: C