Cisco CCNP Security 350-701 Questions & Answers

• Question 571:

  Which threat involves software being used to gain unauthorized access to a computer system?

  A. virus

  B. NTP amplification

  C. ping of death

  D. HTTP flood

  Correct Answer: A

• Question 572:

  Which PKI enrollment method allows the user to separate authentication and enrollment actions and also provides an option to specify HTTP/TFTP commands to perform file retrieval from the server?

  A. url

  B. terminal

  C. profile

  D. selfsigned

  Correct Answer: C

  Reference: https://www.cisco.com/c/en/us/support/docs/security-vpn/public-key- infrastructure-pki/211333-IOSPKI-Deployment-Guide-Initial-Design.html

• Question 573:

  Which Cisco product is open, scalable, and built on IETF standards to allow multiple security products from Cisco and other vendors to share data and interoperate with each other?

  A. Advanced Malware Protection

  B. Platform Exchange Grid

  C. Multifactor Platform Integration

  D. Firepower Threat Defense

  Correct Answer: B

  With Cisco pxGrid (Platform Exchange Grid), your multiple security products can now share data and work together. This open, scalable, and IETF standards-driven platform helps you automate security to get answers and contain threats faster.

• Question 574:

  Which feature within Cisco Umbrella allows for the ability to inspect secure HTTP traffic?

  A. File Analysis

  B. SafeSearch

  C. SSL Decryption

  D. Destination Lists

  Correct Answer: C

  Reference: https://support.umbrella.com/hc/en-us/articles/115004564126-SSL-Decryption- in-the-IntelligentProxy

• Question 575:

  What is the primary benefit of deploying an ESA in hybrid mode?

  A. You can fine-tune its settings to provide the optimum balance between security and performance for your environment

  B. It provides the lowest total cost of ownership by reducing the need for physical appliances

  C. It provides maximum protection and control of outbound messages

  D. It provides email security while supporting the transition to the cloud

  Correct Answer: D

  Cisco Hybrid Email Security is a unique service offering that facilitates the deployment of your email securityinfrastructure both on premises and in the cloud. You can change the number of on-premises versus cloudusers at any time throughout the term of your contract, assuming the total number of users does not change.This allows for deployment flexibility as your organization's needs change.

• Question 576:

  Which CLI command is used to register a Cisco FirePower sensor to Firepower Management Center?

  A. configure system add

  B. configure manager add host

  C. configure manager delete

  D. configure manager add

  Correct Answer: D

• Question 577:

  When using Cisco AMP for Networks which feature copies a file to the Cisco AMP cloud for analysis?

  A. Spero analysis

  B. dynamic analysis

  C. sandbox analysis

  D. malware analysis

  Correct Answer: B

  Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc- config-guidev60/Reference_a_wrapper_Chapter_topic_here.html -> Spero analysis only uploads the signature of the (executable) files to the AMP cloud. It does not upload thewhole file. Dynamic analysis sends files to AMP ThreatGrid.Dynamic Analysis submits (the whole) files to Cisco Threat Grid (formerly AMP Threat Grid). Cisco ThreatGrid runs the file in a sandbox environment, analyzes the file's behavior to determine whether the file ismalicious, and returns a threat score that indicates the likelihood that a file contains malware. From the threatscore, you can view a dynamic analysis summary report with the reasons for the assigned threat score. Youcan also look in Cisco Threat Grid to view detailed reports for files that your organization submitted, as well asscrubbed reports with limited data for files that your organization did not submit.Local malware analysis allows a managed device to locally inspect executables, PDFs, office documents, andother types of files for the most common types of malware, using a detection rule set provided by the CiscoTalos Security Intelligence and Research Group (Talos). Because local analysis does not query the AMP cloud,and does not run the file, local malware analysis saves time and system resources. -> Malware analysis doesnot upload files to anywhere, it only checks the files locally.There is no sandbox analysis feature, it is just a method of dynamic analysis that runs suspicious files in avirtual machine.

• Question 578:

  Which network monitoring solution uses streams and pushes operational data to provide a near real-time view of activity?

  A. SNMP

  B. SMTP

  C. syslog

  D. model-driven telemetry

  Correct Answer: D

  Reference: https://developer.cisco.com/docs/ios-xe/#!streaming-telemetry-quick-start-guide

• Question 579:

  For which two conditions can an endpoint be checked using ISE posture assessment? (Choose two)

  A. Windows service

  B. computer identity

  C. user identity

  D. Windows firewall

  E. default browser

  Correct Answer: AD

• Question 580:

  What must be used to share data between multiple security products?

  A. Cisco Rapid Threat Containment

  B. Cisco Platform Exchange Grid

  C. Cisco Advanced Malware Protection

  D. Cisco Stealthwatch Cloud

  Correct Answer: B