Cisco CCNP Security 350-701 Questions & Answers

• Question 51:

  An engineer is implementing DHCP security mechanisms and needs the ability to add additional attributes to profiles that are created within Cisco ISE.

  Which action accomplishes this task?

  A. Define MAC-to-lP address mappings in the switch to ensure that rogue devices cannot get an IP address

  B. Use DHCP option 82 to ensure that the request is from a legitimate endpoint and send the information to Cisco ISE

  C. Modify the DHCP relay and point the IP address to Cisco ISE.

  D. Configure DHCP snooping on the switch VLANs and trust the necessary interfaces

  Correct Answer: D

• Question 52:

  What is the difference between EPP and EDR?

  A. EPP focuses primarily on threats that have evaded front-line defenses that entered the environment.

  B. Having an EPP solution allows an engineer to detect, investigate, and remediate modern threats.

  C. EDR focuses solely on prevention at the perimeter.

  D. Having an EDR solution gives an engineer the capability to flag offending files at the first sign of malicious behavior.

  Correct Answer: B

• Question 53:

  Which feature must be configured before implementing NetFlow on a router?

  A. SNMPv3

  B. syslog

  C. VRF

  D. IP routing

  Correct Answer: D

• Question 54:

  Which threat intelligence standard contains malware hashes?

  A. advanced persistent threat

  B. open command and control

  C. structured threat information expression

  D. trusted automated exchange of indicator information

  Correct Answer: C

• Question 55:

  Which two commands are required when configuring a flow-export action on a Cisco ASA? (Choose two.)

  A. flow-export event-type

  B. policy-map

  C. access-list

  D. flow-export template timeout-rate 15

  E. access-group

  Correct Answer: AB

• Question 56:

  Which VPN provides scalability for organizations with many remote sites?

  A. DMVPN

  B. SSLVPN

  C. GRE over IPsec

  D. site-to-site IPsec

  Correct Answer: A

• Question 57:

  For which type of attack is multifactor authentication an effective deterrent?

  A. syn flood

  B. phishing

  C. teardrop

  D. ping of death

  Correct Answer: B

• Question 58:

  Which Cisco security solution secures public, private, hybrid, and community clouds?

  A. Cisco ISE

  B. Cisco ASAv

  C. Cisco Cloudlock

  D. Cisco pxGrid

  Correct Answer: C

• Question 59:

  A university policy must allow open access to resources on the Internet for research, but internal workstations are exposed to malware. Which Cisco AMP feature allows the engineering team to determine whether a file is installed on a selected few workstations?

  A. file prevalence

  B. file discovery

  C. file conviction

  D. file manager

  Correct Answer: A

• Question 60:

  What is the concept of continuous integration/continuous delivery pipelining?

  A. The project code is centrally maintained, and each code change should trigger an automated build and test sequence.

  B. The project is split into time-limited cycles, and focuses on pair programming for continuous code review.

  C. The project is split into several phases where one phase cannot start before the previous phase finishes successfully.

  D. Each project phase is independent from other phases to maintain adaptiveness and continual improvement.

  Correct Answer: A