Exam Details

  • Exam Code
    :350-701
  • Exam Name
    :Implementing and Operating Cisco Security Core Technologies (SCOR)
  • Certification
    :CCNP Security
  • Vendor
    :Cisco
  • Total Questions
    :753 Q&As
  • Last Updated
    :Apr 12, 2025

Cisco CCNP Security 350-701 Questions & Answers

  • Question 341:

    An administrator needs to configure the Cisco ASA via ASDM such that the network management system can actively monitor the host using SNMPv3. Which two tasks must be performed for this configuration? (Choose two.)

    A. Specify the SNMP manager and UDP port.

    B. Specify an SNMP user group

    C. Specify a community string.

    D. Add an SNMP USM entry

    E. Add an SNMP host access entry

  • Question 342:

    An administrator is configuring N I P on Cisco ASA via ASDM and needs to ensure that rogue NTP servers cannot insert themselves as the authoritative time source Which two steps must be taken to accomplish this task? (Choose two)

    A. Specify the NTP version

    B. Configure the NTP stratum

    C. Set the authentication key

    D. Choose the interface for syncing to the NTP server

    E. Set the NTP DNS hostname

  • Question 343:

    What is the difference between Cross-site Scripting and SQL Injection, attacks?

    A. Cross-site Scripting is an attack where code is injected into a database, whereas SQL Injection is an attack where code is injected into a browser.

    B. Cross-site Scripting is a brute force attack targeting remote sites, whereas SQL Injection is a social engineering attack.

    C. Cross-site Scripting is when executives in a corporation are attacked, whereas SQL Injection is when a database is manipulated.

    D. Cross-site Scripting is an attack where code is executed from the server side, whereas SQL Injection is an attack where code is executed from the client side.

  • Question 344:

    In which type of attack does the attacker insert their machine between two hosts that are communicating with each other?

    A. man-in-the-middle

    B. cross-site scripting

    C. insecure API

  • Question 345:

    What is a benefit of performing device compliance?

    A. Verification of the latest OS patches

    B. Providing multi-factor authentication

    C. Providing attribute-driven policies

  • Question 346:

    Why is it important to have logical security controls on endpoints even though the users are trained to spot security threats and the network devices already help prevent them?

    A. to prevent theft of the endpoints

    B. because defense-in-depth stops at the network

    C. to expose the endpoint to more threats

    D. because human error or insider threats will still exist

  • Question 347:

    Which Cisco ISE service checks the compliance of endpoints before allowing the endpoints to connect to the network?

    A. posture

    B. profiler

    C. Cisco TrustSec

    D. Threat Centric NAC

  • Question 348:

    Which two solutions help combat social engineering and phishing at the endpoint level? (Choose two.)

    A. Cisco Umbrella

    B. Cisco ISE

    C. Cisco DNA Center

    D. Cisco TrustSec

    E. Cisco Duo Security

  • Question 349:

    DoS attacks are categorized as what?

    A. phishing attacks

    B. flood attacks

    C. virus attacks

    D. trojan attacks

  • Question 350:

    What is a benefit of using a multifactor authentication strategy?

    A. It provides visibility into devices to establish device trust.

    B. It provides secure remote access for applications.

    C. It provides an easy, single sign-on experience against multiple applications

    D. lt protects data by enabling the use of a second validation of identity.

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Cisco exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 350-701 exam preparations and Cisco certification application, do not hesitate to visit our Vcedump.com to find your solutions here.