Cisco CCNP Security 350-701 Questions & Answers

• Question 521:

  The Cisco ASA must support TLS proxy for encrypted Cisco Unified Communications traffic. Where must the ASA be added on the Cisco UC Manager platform?

  A. Certificate Trust List

  B. Endpoint Trust List

  C. Enterprise Proxy Service

  D. Secured Collaboration Proxy

  Correct Answer: A

  https://www.cisco.com/c/en/us/td/docs/security/asa/special/unified-communications/guide/unified-comm/unified-comm-tlsproxy.html

• Question 522:

  What is a characteristic of traffic storm control behavior?

  A. Traffic storm control drops all broadcast and multicast traffic if the combined traffic exceeds the level within the interval.

  B. Traffic storm control cannot determine if the packet is unicast or broadcast.

  C. Traffic storm control monitors incoming traffic levels over a 10-second traffic storm control interval.

  D. Traffic storm control uses the Individual/Group bit in the packet source address to determine if the packet is unicast or broadcast.

  Correct Answer: A

  https://www.cisco.com/c/en/us/td/docs/routers/7600/ios/12-1E/configuration/guide/storm.html

• Question 523:

  A network engineer has entered the snmp-server user andy myv3 auth sha cisco priv aes 256 cisc0383320506 command and needs to send SNMP information to a host at 10.255.254.1. Which command achieves this goal?

  A. snmp-server host inside 10.255.254.1 version 3 andy

  B. snmp-server host inside 10.255.254.1 version 3 myv3

  C. snmp-server host inside 10.255.254.1 snmpv3 andy

  D. snmp-server host inside 10.255.254.1 snmpv3 myv3

  Correct Answer: A

  The command "snmp-server user user-name group-name [ remote ip-address [udp-port port]] {v1 | v2c | v3 [encrypted] [auth {md5 | sha} auth- password]} [access access-list]" adds a new user (in this case "andy") to an SNMPv3 group (in this case group name "myv3") and configures a password for the user.In the "snmp-server host" command, we need to:+ Specify the SNMP version with key word " version {1 | 2 | 3}"+ Specify the username ("andy"), not group name ("myv3").Note: In "snmp-server host inside ..." command, "inside" is the interface name of the ASA interface through which the NMS (located at 10.255.254.1) can be reached.

• Question 524:

  Which Cisco Advanced Malware protection for Endpoints deployment architecture is designed to keep data within a network perimeter?

  A. cloud web services

  B. network AMP

  C. private cloud

  D. public cloud

  Correct Answer: C

• Question 525:

  What are two list types within AMP for Endpoints Outbreak Control? (Choose two)

  A. blocked ports

  B. simple custom detections

  C. command and control

  D. allowed applications

  E. URL

  Correct Answer: BD

  Advanced Malware Protection (AMP) for Endpoints offers a variety of lists, referred to as Outbreak Control, that allow you to customize it to your needs. The main lists are: Simple Custom Detections, Blocked Applications, Allowed Applications, Advanced Custom Detections, and IP Blocked and Allowed Lists.A Simple Custom Detection list is similar to a blocked list. These are files that you want to detect andquarantine.Allowed applications lists are for files you never want to convict. Some examples are a custom application that is detected by a generic engine or a standard image that you use throughout the company Reference: https://docs.amp.cisco.com/AMP%20for%20Endpoints%20User%20Guide.pdf

• Question 526:

  An engineer is configuring AMP for endpoints and wants to block certain files from executing. Which outbreak control method is used to accomplish this task?

  A. device flow correlation

  B. simple detections

  C. application blocking list

  D. advanced custom detections

  Correct Answer: C

• Question 527:

  Which Cisco product provides proactive endpoint protection and allows administrators to centrally manage the deployment?

  A. NGFW

  B. AMP

  C. WSA

  D. ESA

  Correct Answer: B

• Question 528:

  Which type of attack is social engineering?

  A. trojan

  B. phishing

  C. malware

  D. MITM

  Correct Answer: B

  Phishing is a form of social engineering. Phishing attacks use email or malicious web sites to solicit personal,often financial, information. Attackers may send email seemingly from a reputable credit card company orfinancial institution that requests account information, often suggesting that there is a problem.

• Question 529:

  What is the result of running the crypto isakmp key ciscXXXXXXXX address 172.16.0.0 command?

  A. authenticates the IKEv2 peers in the 172.16.0.0/16 range by using the key ciscXXXXXXXX

  B. authenticates the IP address of the 172.16.0.0/32 peer by using the key ciscXXXXXXXX

  C. authenticates the IKEv1 peers in the 172.16.0.0/16 range by using the key ciscXXXXXXXX

  D. secures all the certificates in the IKE exchange by using the key ciscXXXXXXXX

  Correct Answer: B

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/a1/sec-a1-cr-book/sec-cr-c4.html#wp6039879000

• Question 530:

  Which two features of Cisco DNA Center are used in a Software Defined Network solution? (Choose two)

  A. accounting

  B. assurance

  C. automation

  D. authentication

  E. encryption

  Correct Answer: BC

  Reference: https://www.cisco.com/c/en/us/products/collateral/cloud-systems- management/dna-center/nb-06- cisco-dna-center-aag-cte-en.html