Cisco CCNP Security 350-701 Questions & Answers

• Question 351:

  Which feature is leveraged by advanced antimalware capabilities to be an effective endpomt protection platform?

  A. big data

  B. storm centers

  C. sandboxing

  D. blocklisting

  Correct Answer: C

• Question 352:

  Cisco SensorBase gaihers threat information from a variety of Cisco products and services and performs analytics to find patterns on threats. Which term describes this process?

  A. deployment

  B. consumption

  C. authoring

  D. sharing

  Correct Answer: D

  "Sharing telemetry data with the SensorBase Network to improve visibility of alerts and sensor actions on a global scale"

  https://www.cisco.com/c/en/us/td/docs/security/security_management/cisco_security_manager/security_manager/419/user/guide/CSMUserGuide/ipsglobe.html

  "Participating in the Cisco SensorBase Network means that Cisco collects data and shares that information with the SensorBase threat management database. This data includes information about request attributes and how the appliance handles requests."

  https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa_14-1/User-Guide/b_WSA_UserGuide_14_01/b_WSA_UserGuide_11_7_chapter_00.html

• Question 353:

  What is an attribute of the DevSecOps process?

  A. mandated security controls and check lists

  B. security scanning and theoretical vulnerabilities

  C. development security

  D. isolated security team

  Correct Answer: C

  DevSecOps (development, security, and operations) is a concept used in recent years to describe how to movesecurity activities to the start of the development life cycle and have built-in security practices in the continuousintegration/ continuous deployment (CI/CD) pipeline. Thus minimizing vulnerabilities and bringing security closerto IT and business objectives.Three key things make a real DevSecOps environment:+ Security testing is done by the development team.+ Issues found during that testing is managed by the development team.+ Fixing those issues stays within the development team.

• Question 354:

  What are two characteristics of Cisco DNA Center APIs? (Choose two)

  A. Postman is required to utilize Cisco DNA Center API calls.

  B. They do not support Python scripts.

  C. They are Cisco proprietary.

  D. They quickly provision new devices.

  E. They view the overall health of the network

  Correct Answer: DE

  -Use the Know Your Network REST methods to GET information about clients, sites, topology, devices, and issues: Retrieve network health information and site and network physical, Layer 2, Layer 3, and VLAN information. -Configuration Templates with the Template Programmer/Editior is a centralized CLI-management tool that facilitates design and provisioning of workflows in Cisco DNA Center. https://developer.cisco.com/docs/dna-center/#!cisco-dna-center-platform-overview/intent-api-northbound

  Postman is not required: Python, SDK and postman can be used. https://robertcsapo.medium.com/3-simple-ways-to-use-cisco-dna-center-platform-apis-7eee49b76287 These APIs can be open or proprietary. https://www.ciscopress.com/articles/article.asp?p=3004581andseqNum=2

• Question 355:

  An organization has a Cisco Stealthwatch Cloud deployment in their environment. Cloud logging is working as expected, but logs are not being received from the on-premise network, what action will resolve this issue?

  A. Configure security appliances to send syslogs to Cisco Stealthwatch Cloud

  B. Configure security appliances to send NetFlow to Cisco Stealthwatch Cloud

  C. Deploy a Cisco FTD sensor to send events to Cisco Stealthwatch Cloud

  D. Deploy a Cisco Stealthwatch Cloud sensor on the network to send data to Cisco Stealthwatch Cloud

  Correct Answer: D

  Reference: CCNP And CCIE Security Core SCOR 350-701 Official Cert Guide

• Question 356:

  Which type of dashboard does Cisco DNA Center provide for complete control of the network?

  A. service management

  B. centralized management

  C. application management

  D. distributed management

  Correct Answer: B

  Reference: https://www.cisco.com/c/en/us/products/collateral/cloud-systems- management/dna-center/nb-06- dna-center-faq-cte-en.html

• Question 357:

  A switch with Dynamic ARP Inspection enabled has received a spoofed ARP response on a trusted interface.

  How does the switch behave in this situation?

  A. It forwards the packet after validation by using the MAC Binding Table.

  B. It drops the packet after validation by using the IP and MAC Binding Table.

  C. It forwards the packet without validation.

  D. It drops the packet without validation.

  Correct Answer: C

• Question 358:

  Which cloud model is a collaborative effort where infrastructure is shared and jointly accessed by several organizations from a specific group?

  A. Hybrid

  B. Community

  C. Private

  D. Public

  Correct Answer: B

  Community Cloud allows system and services to be accessible by group of organizations. It shares theinfrastructure between several organizations from a specific community. It may be managed internally byorganizations or by the third-party.

• Question 359:

  Which term describes when the Cisco Firepower downloads threat intelligence updates from Cisco Talos?

  A. consumption

  B. sharing

  C. analysis

  D. authoring

  Correct Answer: A

  we will showcase Cisco Threat Intelligence Director (CTID) an exciting feature on Cisco's FirepowerManagement Center (FMC) product offering that automates the operationalization of threat intelligence. TID has the ability to consume threat intelligence via STIX over TAXII and allows uploads/downloads of STIX and simple blacklists. Reference: https://blogs.cisco.com/developer/automate-threat- intelligence-using-cisco-threat-intelligencedirector

• Question 360:

  What is a benefit of using Cisco FMC over Cisco ASDM?

  A. Cisco FMC uses Java while Cisco ASDM uses HTML5.

  B. Cisco FMC provides centralized management while Cisco ASDM does not.

  C. Cisco FMC supports pushing configurations to devices while Cisco ASDM does not.

  D. Cisco FMC supports all firewall products whereas Cisco ASDM only supports Cisco ASA devices

  Correct Answer: B

  Reference: https://www.cisco.com/c/en/us/products/collateral/security/firesight- management-center/datasheetc78-736775.html