Do you want to study on cisco 350-701 together?

hmhuo

学习了，感谢楼主分享！！！

姜洪涛

QUESTION 14
Which PKI enrollment method allows the user to separate authentication and enrollment actions and also provides an option to specify HTTP/TFTP
commands to perform file retrieval from the server?
" W& D) g/ D6 B" V! r( MA. profile
B. url
9 I' G( Z8 u; }2 V8 G( r8 ZC. terminal
D. selfsigned
1 Q0 p" Z! s( b! bCorrect Answer: A
( [0 }: Y& S- s' i4 }; R# LQUESTION 15
Which two risks is a company vulnerable to if it does not have a well-established patching solution for endpoints? (Choose two)
A. ARP spoofing
B. exploits
C. malware
& q: i& C* a" n8 b, P5 g4 D! ED. eavesdropping
. c2 N0 U0 F% x* b2 iE. denial-of-service attacks
1 A( |! N+ U1 A8 t  R; rCorrect Answer: BC
QUESTION 16
What are two rootkit types? (Choose two)
A. bootloader
B. buffer mode
C. registry
D. virtual
) Y% @8 \# K7 }* X7 V) kE. user mode
Correct Answer: A
QUESTION 17
Which threat involves software being used to gain unauthorized access to a computer system?
* J3 d7 T# G3 \4 c$ v2 c, JA. ping of death
+ d* |& C0 K$ IB. HTTP flood
C. virus
# Z* L1 a/ i% g) u. s# r0 W* s* [D. NTP amplification
) N- F. Z0 t! _# QCorrect Answer: C
QUESTION 18
5 s: T9 E; f; EElliptic curve cryptography is a stronger more efficient cryptography method meant to replace which current encryption technology?
' O: K' e6 B6 B  R; o1 k7 b+ t' B  F# vA. 3DES
" U' i: D6 x/ mB. DES
5 g+ {& X2 `1 w$ x1 GC. RSA
D. AES
6 e; h: n0 C, X  k  C1 VCorrect Answer: C

姜洪涛

QUESTION 19
6 C( ^4 W) r. _% z( TWhich two descriptions of AES encryption are true? (Choose two)
A. AES is more secure than 3DES.
B. AES can use a 168-bit key for encryption.
C. AES can use a 256-bit key for encryption.
D. AES encrypts and decrypts a key three times in sequence.
) D" B% W+ u! J5 w4 k/ k4 z6 DE. AES is less secure than 3DES.
Correct Answer: AC
) Q: H2 b  Y  l4 ?+ M/ |) X( k$ jQUESTION 20
2 x" h6 d. ~3 e8 C; zWhich algorithm provides encryption and authentication for data plane communication?
A. SHA-96
B. SHA-384
! e1 o  x8 Z2 }! \4 B- |7 d% bC. AES-GCM
D. AES-256
" _5 B+ j3 t& {Correct Answer: C
QUESTION 21
Which two key and block sizes are valid for AES? (Choose two)
A. 128-bit block size, 192-bit key length
B. 128-bit block size, 256-bit key length
1 o/ F5 y3 ?2 Y; }- B' i7 [C. 64-bit block size, 168-bit key length
, T' U8 J8 }! r7 j& @D. 192-bit block size, 256-bit key length
E. 64-bit block size, 112-bit key length
Correct Answer: AB

姜洪涛

QUESTION 22
What is the result of running the crypto isakmp key ciscXXXXXXXX address 172.16.0.0 command?
8 B+ |- O% @0 R! b: dA. authenticates the IKEv2 peers in the 172.16.0.0/16 range by using the key ciscXXXXXXXX
8 Y2 D8 G" M( ^, h0 DB. authenticates the IP address of the 172.16.0.0/32 peer by using the key ciscXXXXXXXX
C. authenticates the IKEv1 peers in the 172.16.0.0/16 range by using the key ciscXXXXXXXX
% l( v/ j) U, A7 ?. H1 R- G; jD. secures all the certificates in the IKE exchange by using the key ciscXXXXXXXX
Correct Answer: B
QUESTION 23
Which technology must be used to implement secure VPN connectivity among company branches over a private IP cloud with any-to-any scalable
& `0 i6 M9 v0 K# r3 \, oconnectivity?
A. DMVPN
. g8 c. L# F1 Z/ @B. FlexVPN
/ s7 O+ H7 Q. @4 T$ d! dC. IPsec DVTI
; E2 Y" ^( H8 v# wD. GET VPN
Correct Answer: D
QUESTION 24
, a/ ]/ d! F- B1 C. }Which two conditions are prerequisites for stateful failover for IPsec? (Choose two)
. f& |$ G4 o* y1 O" qA. Only the IKE configuration that is set up on the active device must be duplicated on the standby device; the IPsec configuration is copied
8 b' D# D8 n) O" `; Y3 @automatically
B. The active and standby devices can run different versions of the Cisco IOS software but must be the same type of device.
C. The IPsec configuration that is set up on the active device must be duplicated on the standby device
* O; Z$ U/ W% `7 \# i/ e8 c$ fD. Only the IPsec configuration that is set up on the active device must be duplicated on the standby device; the IKE configuration is copied
automatically.
2 P  j8 {. g2 {1 n# YE. The active and standby devices must run the same version of the Cisco IOS software and must be the same type of device.
Correct Answer: CE

姜洪涛

QUESTION 25
1 i/ @/ e, r, ^! c* F5 j* EWhich VPN technology can support a multivendor environment and secure traffic between sites?
9 k3 E& X( _2 WA. SSL VPN
4 ?# u# Z* n/ k2 V  E- L! nB. GET VPN
" z' X5 T+ ]# b# |6 kC. FlexVPN
D. DMVPN
Correct Answer: B
QUESTION 26
$ ^3 b0 s: O! g" Y2 cA network engineer is configuring DMVPN and entered the crypto isakmp key cisc0380739941 address 0.0.0.0 command on hostA. The tunnel is not
being established to hostB. What action is needed to authenticate the VPN?
3 K; J3 n4 S! U3 a0 f7 AA. Change isakmp to ikev2 in the command on hostA.
B. Enter the command with a different password on hostB.
3 L/ W( v4 I* e+ rC. Enter the same command on hostB.
D. Change the password on hostA to the default password.
$ E: }0 W( `& u* H7 E( HCorrect Answer: C
QUESTION 27
Refer to the exhibit.
A network administrator configured a site-to-site VPN tunnel between two Cisco IOS routers, and hosts are unable to communicate between two sites of
5 }. t: U/ o. e/ H* G7 ?VPN. The network administrator runs the debug crypto isakmp sa command to track VPN status. What is the problem according to this command
output?
1 s! C% m5 \4 aA. hashing algorithm mismatch
* x: \, t& `6 ^) WB. encryption algorithm mismatch
/ ?, Y. Q4 Y( A( O2 L( }' @  d! w% RC. authentication key mismatch
! e6 i8 k( U( S  h9 ]* W7 eD. interesting traffic was not applied
* ]! m; Q# c3 h! {0 }Correct Answer: C
4 @' Z. @7 D' v4 YQUESTION 28
What is a difference between FlexVPN and DMVPN?
% Z, q; E* v4 L: [5 |A. DMVPN uses IKEv1 or IKEv2, FlexVPN only uses IKEv1
' ~3 X5 ]( [1 g5 @" h2 _1 O8 ]B. DMVPN uses only IKEv1 FlexVPN uses only IKEv2
C. FlexVPN uses IKEv2, DMVPN uses IKEv1 or IKEv2
D. FlexVPN uses IKEv1 or IKEv2, DMVPN uses only IKEv2
Correct Answer: C

姜洪涛

QUESTION 29
Which protocol provides the strongest throughput performance when using Cisco AnyConnect VPN?
+ p8 }$ b& S% ^  |! eA. TLSv1.2
7 A7 B0 b1 s0 hB. TLSv1.1
# Y* O5 [9 I# F6 M6 u& i* bC. BJTLSv1
# \( l, U4 z6 p* S3 l# P8 t! CD. DTLSv1
: P" M$ U5 h: g% k; o1 W7 KCorrect Answer:
D
& l/ [3 \( {: YQUESTION 30
What is a commonality between DMVPN and FlexVPN technologies?
5 S; H8 Y$ ^' G  L3 u1 D: eA. FlexVPN and DMVPN use IS-IS routing protocol to communicate with spokes
# Y& V7 e# L2 f4 p0 i7 b' XB. FlexVPN and DMVPN use the new key management protocol
$ u& Z) B5 L3 p0 i) ZC. FlexVPN and DMVPN use the same hashing algorithms
D. IOS routers run the same NHRP code for DMVPN and FlexVPN
Correct Answer: D
, g1 D4 d% Y) }1 C" Q5 WQUESTION 31
Which functions of an SDN architecture require southbound APIs to enable communication?
A. management console and the cloud
3 V! o& ]; j  O6 h/ uB. management console and the SDN controller
) |6 H; e- o, I/ mC. SDN controller and the cloud
' C0 j. j4 U5 d% CD. SDN controller and the network elements
Correct Answer: D
QUESTION 32
! r3 r2 V9 ^( Q0 ?: u9 u( D! lWhich two features of Cisco DNA Center are used in a Software Defined Network solution? (Choose two)
4 @  g; A0 g5 y  H' j5 mA. accounting
B. encryption
% ^( P8 {7 A0 a1 s7 [9 eC. assurance
: t& ]: e2 ^1 W4 ]D. automation
E. authentication
4 d. b0 H' b, g5 X: x4 o: ^$ iCorrect Answer: CD

姜洪涛

QUESTION 33
# R. z. C: C* UThe main function of northbound APIs in the SDN architecture is to enable communication between which two areas of a network?
( s- @. a2 w/ \1 x% Z* ?( gA. SDN controller and the cloud
6 ~1 u0 d, N( H* F6 s. kB. management console and the cloud
C. management console and the SDN controller
6 k5 z" `- i+ w2 l+ a0 l* X1 VD. SDN controller and the management solution
! }/ \& l. K+ i4 KCorrect Answer: D
# G# I# t6 |3 h% UQUESTION 34
% I( d/ P6 u2 n4 L6 t* HWhich two request of REST API are valid on the Cisco ASA Platform? (Choose two)
A. push
B. options
. O% c' b+ Z7 O. SC. connect
D. put
E. get
6 s. A* J/ J* M, \+ eCorrect Answer: AD

姜洪涛

35. Refer to the exhibit.
: ^8 |) K* y) D! d2 x5 h
  y+ d9 {+ Z6 R; N6 o9 `6 SWhat does the API do when connected to a Cisco security appliance?
A. create an SNMP pull mechanism for managing AMP
. k& e1 v0 y0 s" p3 bB. gather network telemetry information from AMP for endpoints
C. get the process and PID information from the computers in the network
D. gather the network interface information about the computers AMP sees
Correct Answer: D

姜洪涛

QUESTION 36
# |4 X- ^# l6 r+ V7 ?Refer to the exhibit.
What is the result of this Python script of the Cisco DNA Center API?
, S% B+ ^; a0 z0 k& F, RA. adds a switch to Cisco DNA Center
B. adds authentication to a switch
$ X' }, t9 Q  g& y  xC. receives information about a switch
* H" Y( z; u. W5 X/ e* PCorrect Answer: A

姜洪涛

QUESTION 37
Which API is used for Content Security?
A. OpenVuln API
3 P: m; s* Y' i5 G9 PB. IOS XR API
C. NX-OS API
D. AsyncOS API
Correct Answer: D
# `& p7 Q, k9 H8 @QUESTION 38
Which option is the main function of Cisco Firepower impact flags?
. q1 L1 W: V# @7 W/ }; o+ h) HA. They alert administrators when critical events occur.
( i# K( b/ o1 v" x6 h3 {B. They identify data that the ASA sends to the Firepower module.
# s' Z3 `5 M7 o! E1 @1 z0 t7 l7 `. AC. They correlate data about intrusions and vulnerability.
3 v6 m* K: N0 ^9 q& f4 Z% c2 ^D. They highlight known and suspected malicious IP addresses in reports.
Correct Answer: C

姜洪涛

QUESTION 38
Which option is the main function of Cisco Firepower impact flags?
& i( H: B" F2 g' f2 z( k0 U6 KA. They alert administrators when critical events occur.
5 R; H/ g+ f8 j/ wB. They identify data that the ASA sends to the Firepower module.
% B8 ~& ^2 E2 H& |) r* b- DC. They correlate data about intrusions and vulnerability.
D. They highlight known and suspected malicious IP addresses in reports.
0 o0 C$ m% h% \6 ~1 {3 F* ICorrect Answer:
C
& S6 T4 G' }# ]) p0 Z! A: ~QUESTION 39
, d2 O4 F  A7 c* }5 V. q2 O( sWhich two deployment model configurations are supported for Cisco FTDv in AWS? (Choose two)
2 G$ q' G, [3 ?. R- EA. Cisco FTDv configured in routed mode and IPv6 configured
B. Cisco FTDv configured in routed mode and managed by a physical FMC appliance on premises
4 A1 k3 J: V# B; z4 a# H- q3 {C. Cisco FTDv configured in routed mode and managed by an FMCv installed in AWS
; l/ _2 {) J  u& f3 H  r0 ED. Cisco FTDv with two management interfaces and one traffic interface configured
0 i/ g, N8 ~. f6 W3 ME. Cisco FTDv with one management interface and two traffic interfaces configured
5 |% F5 {3 W: D% M0 |- iCorrect Answer:
" T: A7 i/ c0 F7 tBC

姜洪涛

QUESTION 41
8 D( v8 w. A5 zWhich two deployment modes does the Cisco ASA FirePower module support? (Choose two)
A. routed mode
7 C: D. ?1 {6 I$ X# O* L( g+ t+ RB. active mode
3 `& a  n! ~8 ~% s3 R& w3 FC. transparent mode
D. inline mode
E. passive monitor-only mode
) }7 I: h, M- N1 p" `7 |Correct Answer:
) Y' q- D$ ]  cDE
QUESTION 42
Which feature is configured for managed devices in the device platform settings of the Firepower Management Center?
A. time synchronization
B. network address translations
- D4 z, E- u+ M+ y  w/ {9 cC. quality of service
1 x$ l9 e% Z. a0 |. MD. intrusion policy
1 H. S% T! M; w+ u" dCorrect Answer:
A

thamky

chrishk300

THX A LOT

jagger8881411

i want to study