Question 136
Selectable Answer
What are two characteristics of the RESTful architecture used within Cisco DNA Center? (Choose two.)
Answer:
Free Demo Questions
Test Online Free Cisco 350-701 Exam Questions and Answers
Practice a live sample before buying full access. This page keeps the free 350-701 question set organized by page so visitors and search engines can reach the canonical -questions.html URL directly.
Page 10 of 15
Question 137
Selectable Answer
Refer to the exhibit.
What will happen when the Python script is executed?
What will happen when the Python script is executed?
Answer:
Question 138
Selectable Answer
What must be used to share data between multiple security products?
Answer:
Question 139
Selectable Answer
What are two ways that Cisco Container Platform provides value to customers who utilize cloud service providers? (Choose two.)
Answer:
Question 140
Selectable Answer
Refer to the exhibit.
An administrator is adding a new Cisco FTD device to their network and wants to manage it with Cisco FMC.
The Cisco FTD is not behind a NAT device.
Which command is needed to enable this on the Cisco FTD?
An administrator is adding a new Cisco FTD device to their network and wants to manage it with Cisco FMC.
The Cisco FTD is not behind a NAT device.
Which command is needed to enable this on the Cisco FTD?
Answer:
Explanation:
To let FMC manages FTD, first we need to add manager from the FTD and assign a register key of your
choice. The command configure manager add 1.1.1.2 the_registration_key_you_want, where 1.1.1.2 is the IP
address of the FMC, you need to use the same registration key in FMC when adding this FTD as a manageddevice.
Reference: https://cyruslab.net/2019/09/03/ciscocisco-firepower-lab-setup/
Explanation:
To let FMC manages FTD, first we need to add manager from the FTD and assign a register key of your
choice. The command configure manager add 1.1.1.2 the_registration_key_you_want, where 1.1.1.2 is the IP
address of the FMC, you need to use the same registration key in FMC when adding this FTD as a manageddevice.
Reference: https://cyruslab.net/2019/09/03/ciscocisco-firepower-lab-setup/
Question 141
Selectable Answer
What are two functions of secret key cryptography? (Choose two)
Answer:
Question 142
Selectable Answer
When wired 802.1X authentication is implemented, which two components are required? (Choose two)
Answer:
Question 143
Selectable Answer
Which solution is made from a collection of secure development practices and guidelines that
developers must follow to build secure applications?
developers must follow to build secure applications?
Answer:
Question 144
Selectable Answer
An organization wants to provide visibility and to identify active threats in its network using a VM. The
organization wants to extract metadata from network packet flow while ensuring that payloads are not retained
or transferred outside the network.
Which solution meets these requirements?
organization wants to extract metadata from network packet flow while ensuring that payloads are not retained
or transferred outside the network.
Which solution meets these requirements?
Answer:
Explanation:
Private Network Monitoring (PNM) provides visibility and threat detection for the on-premises network, delivered from the cloud as a SaaS solution. It is the perfect solution for organizations who prefer SaaS products and desire better awareness and security in their on-premises environments while reducing capital expenditure andoperational overhead. It works by deploying lightweight software in a virtual machine or server that canconsume a variety of native sources of telemetry or extract metadata from network packet flow. It encrypts this metadata and sends it to the Stealthwatch Cloud analytics platform for analysis. Stealthwatch Cloud consumes metadata only. The packet payloads are never retained or transferred outside the network.
This lab focuses on how to configure a Stealthwatch Cloud Private Network Monitoring (PNM) Sensor, in order to provide visibility and effectively identify active threats, and monitors user and device behavior within onpremises networks.
The Stealthwatch Cloud PNM Sensor is an extremely flexible piece of technology, capable of being utilized in a number of different deployment scenarios. It can be deployed as a complete Ubuntu based virtual appliance on different hypervisors (e.g. CVMware, VirtualBox). It can be deployed on hardware running a number of different Linux-based operating systems.
Reference: https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2019/pdf/5eU6DfQV/LTRSEC-2240-LG2.pdf
Explanation:
Private Network Monitoring (PNM) provides visibility and threat detection for the on-premises network, delivered from the cloud as a SaaS solution. It is the perfect solution for organizations who prefer SaaS products and desire better awareness and security in their on-premises environments while reducing capital expenditure andoperational overhead. It works by deploying lightweight software in a virtual machine or server that canconsume a variety of native sources of telemetry or extract metadata from network packet flow. It encrypts this metadata and sends it to the Stealthwatch Cloud analytics platform for analysis. Stealthwatch Cloud consumes metadata only. The packet payloads are never retained or transferred outside the network.
This lab focuses on how to configure a Stealthwatch Cloud Private Network Monitoring (PNM) Sensor, in order to provide visibility and effectively identify active threats, and monitors user and device behavior within onpremises networks.
The Stealthwatch Cloud PNM Sensor is an extremely flexible piece of technology, capable of being utilized in a number of different deployment scenarios. It can be deployed as a complete Ubuntu based virtual appliance on different hypervisors (e.g. CVMware, VirtualBox). It can be deployed on hardware running a number of different Linux-based operating systems.
Reference: https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2019/pdf/5eU6DfQV/LTRSEC-2240-LG2.pdf
Question 145
Selectable Answer
Which type of DNS abuse exchanges data between two computers even when there is no direct connection?
Answer:
Explanation:
Malware installation: This may be done by hijacking DNS queries and responding with malicious IP addresses.Command & Control communication: As part of lateral movement, after an initial compromise, DNScommunications is abused to communicate with a C2 server. This typically involves making periodic DNSqueries from a computer in the target network for a domain controlled by the adversary. The responses contain encoded messages that may be used to perform unauthorized actions in the target network.
Network footprinting: Adversaries use DNS queries to build a map of the network. Attackers live off the terrain so developing a map is important to them.
Data theft (exfiltration): Abuse of DNS to transfer data; this may be performed by tunneling other protocols like FTP, SSH through DNS queries and responses. Attackers make multiple DNS queries from a compromised computer to a domain owned by the adversary. DNS tunneling can also be used for executing commands and transferring malware into the target network.
Reference: https://www.netsurion.com/articles/5-types-of-dns-attacks-and-how-to-detect-them
Explanation:
Malware installation: This may be done by hijacking DNS queries and responding with malicious IP addresses.Command & Control communication: As part of lateral movement, after an initial compromise, DNScommunications is abused to communicate with a C2 server. This typically involves making periodic DNSqueries from a computer in the target network for a domain controlled by the adversary. The responses contain encoded messages that may be used to perform unauthorized actions in the target network.
Network footprinting: Adversaries use DNS queries to build a map of the network. Attackers live off the terrain so developing a map is important to them.
Data theft (exfiltration): Abuse of DNS to transfer data; this may be performed by tunneling other protocols like FTP, SSH through DNS queries and responses. Attackers make multiple DNS queries from a compromised computer to a domain owned by the adversary. DNS tunneling can also be used for executing commands and transferring malware into the target network.
Reference: https://www.netsurion.com/articles/5-types-of-dns-attacks-and-how-to-detect-them
Question 146
Selectable Answer
What is a benefit of performing device compliance?
Answer:
Question 147
Selectable Answer
Which category includes DoS Attacks?
Answer:
Question 148
Selectable Answer
In which two ways does the Cisco Advanced Phishing Protection solution protect users? (Choose two.)
Answer:
Question 149
Selectable Answer
Which Cisco DNA Center Intent API action is used to retrieve the number of devices known to a DNA
Center?
Center?
Answer:
Question 150
Selectable Answer
What are two facts about WSA HTTP proxy configuration with a PAC file? (Choose two.)
Answer:
Showing page 10 of 15
