350-701 Dumps Updated to V27.02 for Exam Preparation: Check 350-701 Free Dumps (Part 1, Q1-Q40) First

1. Which two application layer preprocessors are used by Firepower Next Generation Intrusion Prevention System? (Choose two)

2. Which technology reduces data loss by identifying sensitive information stored in public computing environments?

3. Which algorithm provides encryption and authentication for data plane communication?

4. Which PKI enrollment method allows the user to separate authentication and enrollment actions and also provides an option to specify HTTP/TFTP commands to perform file retrieval from the server?

5. Which two probes are configured to gather attributes of connected endpoints using Cisco Identity Services Engine? (Choose two)

6. Which policy is used to capture host information on the Cisco Firepower Next Generation Intrusion Prevention System?

7. Which two features of Cisco DNA Center are used in a Software Defined Network solution? (Choose two)

8. In which two ways does a system administrator send web traffic transparently to the Web Security

Appliance? (Choose two)

9. Which API is used for Content Security?

10. Which telemetry data captures variations seen within the flow, such as the packets TTL, IP/TCP flags, and payload length?

11. Which two features are used to configure Cisco ESA with a multilayer approach to fight viruses and malware? (Choose two)

12. What is the purpose of the Decrypt for Application Detection feature within the WSA Decryption options?

13. What is a difference between FlexVPN and DMVPN?

14. Which solution protects hybrid cloud deployment workloads with application visibility and segmentation?

15. What is the difference between deceptive phishing and spear phishing?

16. Refer to the exhibit.

A network administrator configures command authorization for the admin5 user.

What is the admin5 user able to do on HQ_Router after this configuration?

17. Which form of attack is launched using botnets?

18. What does the Cloudlock Apps Firewall do to mitigate security concerns from an application perspective?

19. Which two statements about a Cisco WSA configured in Transparent mode are true? (Choose two)

20. Which information is required when adding a device to Firepower Management Center?

21. Which IPS engine detects ARP spoofing?

22. A mall provides security services to customers with a shared appliance. The mall wants separation of management on the shared appliance.

Which ASA deployment mode meets these needs?

23. A network engineer is configuring DMVPN and entered the crypto isakmp key cisc0380739941 address 0.0.0.0 command on host A. The tunnel is not being established to host B.

What action is needed to authenticate the VPN?

24. Which functions of an SDN architecture require southbound APIs to enable communication?

25. Refer to the exhibit.

What is the result of this Python script of the Cisco DNA Center API?

26. Which type of attack is social engineering?

27. Which protocol provides the strongest throughput performance when using Cisco AnyConnect VPN?

28. Which two services must remain as on-premises equipment when a hybrid email solution is deployed? (Choose two)

29. For which two conditions can an endpoint be checked using ISE posture assessment? (Choose two)

30. Which feature of Cisco ASA allows VPN users to be postured against Cisco ISE without requiring an

Inline posture node?

31. An engineer must force an endpoint to re-authenticate an already authenticated session without disrupting the endpoint to apply a new or updated policy from ISE.

Which CoA type achieves this goal?

32. Which two key and block sizes are valid for AES? (Choose two)

33. Which two characteristics of messenger protocols make data exfiltration difficult to detect and

prevent? (Choose two)

34. What is the primary role of the Cisco Email Security Appliance?

35. The main function of northbound APIs in the SDN architecture is to enable communication between which two areas of a network?

36. Which compliance status is shown when a configured posture policy requirement is not met?

37. Which two tasks allow NetFlow on a Cisco ASA 5500 Series firewall? (Choose two)

38. On Cisco Firepower Management Center, which policy is used to collect health modules alerts from Managed devices?

39. Which two endpoint measures are used to minimize the chances of falling victim to phishing and social

engineering attacks? (Choose two)

40. A network administrator configures Dynamic ARP Inspection on a switch. After Dynamic ARP Inspection is applied, all users on that switch are unable to communicate with any destination. The network administrator checks the interface status of all interfaces, and there is no err-disabled interface.

What is causing this problem?