Do you want to study on cisco 350-701 together?

hmhuo

学习了，感谢楼主分享！！！

姜洪涛

QUESTION 14
% N1 W0 r4 W9 }( P6 X7 xWhich PKI enrollment method allows the user to separate authentication and enrollment actions and also provides an option to specify HTTP/TFTP
! F; k% }: d, y! L$ [commands to perform file retrieval from the server?
A. profile
. {+ c8 Z& l- E* E3 YB. url
C. terminal
* k1 {! G1 n8 ^) mD. selfsigned
# [* ^. s; q7 t' E. @; z7 T4 VCorrect Answer: A
1 Q  a. o/ r: n( s/ NQUESTION 15
* A7 i$ n5 Y/ [7 h+ J5 T1 fWhich two risks is a company vulnerable to if it does not have a well-established patching solution for endpoints? (Choose two)
A. ARP spoofing
; e& t7 O7 m) J2 {+ B" C0 qB. exploits
C. malware
D. eavesdropping
2 k+ a# `$ u6 ]; l+ ?+ BE. denial-of-service attacks
; t2 [3 _2 N) {4 N7 p$ e. MCorrect Answer: BC
QUESTION 16
( w* `$ a/ O4 }What are two rootkit types? (Choose two)
5 T' G+ L( ^1 E$ |$ pA. bootloader
" |! @! o' X1 B. y" T- A6 N7 F& YB. buffer mode
C. registry
D. virtual
8 N" P: L( W$ F  ~1 xE. user mode
Correct Answer: A
QUESTION 17
Which threat involves software being used to gain unauthorized access to a computer system?
A. ping of death
' o; u+ Z, s4 y2 LB. HTTP flood
C. virus
9 m  {; o# w; ]: |D. NTP amplification
: }6 l  `7 ?7 ICorrect Answer: C
QUESTION 18
, d% t$ {+ `/ ]  |Elliptic curve cryptography is a stronger more efficient cryptography method meant to replace which current encryption technology?
A. 3DES
B. DES
C. RSA
D. AES
Correct Answer: C

姜洪涛

QUESTION 19
Which two descriptions of AES encryption are true? (Choose two)
  p& A# _+ U3 x4 nA. AES is more secure than 3DES.
B. AES can use a 168-bit key for encryption.
C. AES can use a 256-bit key for encryption.
D. AES encrypts and decrypts a key three times in sequence.
E. AES is less secure than 3DES.
Correct Answer: AC
3 q) `( g5 y# s2 ZQUESTION 20
; c3 Y. o( Q0 _0 l6 BWhich algorithm provides encryption and authentication for data plane communication?
' e) [) ^+ L0 n: g$ G9 NA. SHA-96
B. SHA-384
C. AES-GCM
9 u; R, D* f# Z; H0 Z) MD. AES-256
Correct Answer: C
) c' S/ B1 G  n5 P# I* ^, N9 fQUESTION 21
Which two key and block sizes are valid for AES? (Choose two)
A. 128-bit block size, 192-bit key length
B. 128-bit block size, 256-bit key length
C. 64-bit block size, 168-bit key length
1 K. T" _/ w' z) AD. 192-bit block size, 256-bit key length
E. 64-bit block size, 112-bit key length
Correct Answer: AB

姜洪涛

QUESTION 22
3 l# L# A& i0 q' l/ iWhat is the result of running the crypto isakmp key ciscXXXXXXXX address 172.16.0.0 command?
A. authenticates the IKEv2 peers in the 172.16.0.0/16 range by using the key ciscXXXXXXXX
B. authenticates the IP address of the 172.16.0.0/32 peer by using the key ciscXXXXXXXX
C. authenticates the IKEv1 peers in the 172.16.0.0/16 range by using the key ciscXXXXXXXX
% \# S1 v5 y$ h, B1 V2 u( D; gD. secures all the certificates in the IKE exchange by using the key ciscXXXXXXXX
Correct Answer: B
QUESTION 23
Which technology must be used to implement secure VPN connectivity among company branches over a private IP cloud with any-to-any scalable
connectivity?
A. DMVPN
7 k' H  U' ^/ qB. FlexVPN
C. IPsec DVTI
D. GET VPN
5 u: H3 h0 _+ q- n/ |Correct Answer: D
QUESTION 24
& j& I) F& `/ ?; |: iWhich two conditions are prerequisites for stateful failover for IPsec? (Choose two)
6 }/ u. H4 B) @2 G5 _6 YA. Only the IKE configuration that is set up on the active device must be duplicated on the standby device; the IPsec configuration is copied
; |7 r: T. ^" b) |9 ?) g  \automatically
$ n9 E1 v  Z0 {0 l! }$ ^1 W4 lB. The active and standby devices can run different versions of the Cisco IOS software but must be the same type of device.
' R/ E6 Q% t% ~C. The IPsec configuration that is set up on the active device must be duplicated on the standby device
D. Only the IPsec configuration that is set up on the active device must be duplicated on the standby device; the IKE configuration is copied
, M! y1 x  l2 X3 ?0 `& ~4 Rautomatically.
E. The active and standby devices must run the same version of the Cisco IOS software and must be the same type of device.
  f" H' ]; _; \% s/ Y- v) kCorrect Answer: CE

姜洪涛

QUESTION 25
Which VPN technology can support a multivendor environment and secure traffic between sites?
A. SSL VPN
0 s; z: a0 G) B" p1 GB. GET VPN
C. FlexVPN
0 w& o: r$ E% |( j2 X3 uD. DMVPN
Correct Answer: B
QUESTION 26
5 D! l/ }, X& v: ~2 ?A network engineer is configuring DMVPN and entered the crypto isakmp key cisc0380739941 address 0.0.0.0 command on hostA. The tunnel is not
being established to hostB. What action is needed to authenticate the VPN?
A. Change isakmp to ikev2 in the command on hostA.
B. Enter the command with a different password on hostB.
C. Enter the same command on hostB.
D. Change the password on hostA to the default password.
* V& t) e) {7 R- q9 TCorrect Answer: C
QUESTION 27
& v0 E4 i; [7 d0 d. M! {" gRefer to the exhibit.
6 |0 b* h9 F- g) g% @! }6 FA network administrator configured a site-to-site VPN tunnel between two Cisco IOS routers, and hosts are unable to communicate between two sites of
VPN. The network administrator runs the debug crypto isakmp sa command to track VPN status. What is the problem according to this command
6 E) {* k+ |9 L" f2 @( J, e1 m+ N  ]output?
8 A: H% B0 J& \0 [A. hashing algorithm mismatch
3 ]1 O3 ~6 d( ]7 v  s$ J' ]B. encryption algorithm mismatch
C. authentication key mismatch
$ }+ ^. H2 I" t- i2 Q; _* AD. interesting traffic was not applied
Correct Answer: C
- D( j! W) m: k. y8 \& }1 i$ ^QUESTION 28
9 V$ i9 A$ ^% L/ A! b0 b% PWhat is a difference between FlexVPN and DMVPN?
A. DMVPN uses IKEv1 or IKEv2, FlexVPN only uses IKEv1
, F; q5 o+ D$ k! J. [B. DMVPN uses only IKEv1 FlexVPN uses only IKEv2
C. FlexVPN uses IKEv2, DMVPN uses IKEv1 or IKEv2
+ U' S" Q8 z; E+ \D. FlexVPN uses IKEv1 or IKEv2, DMVPN uses only IKEv2
Correct Answer: C
0 K4 }8 q. [; L+ ~6 S3 X1 n

姜洪涛

QUESTION 29
6 g2 T6 z  i7 ^8 k9 c/ ]7 o2 j7 UWhich protocol provides the strongest throughput performance when using Cisco AnyConnect VPN?
A. TLSv1.2
! ]1 Q8 o* |8 }& T8 j3 \8 c. ?' ^B. TLSv1.1
' f' j7 Q, R9 U1 f8 pC. BJTLSv1
D. DTLSv1
$ z& S7 J- G3 ZCorrect Answer:
1 X8 w) H! c* h7 W! ND
: e! V- A* R# Q7 G4 \QUESTION 30
5 K1 i: P+ B' _' |- J4 v) pWhat is a commonality between DMVPN and FlexVPN technologies?
7 }0 M( l& ?3 l0 X6 V( D1 R" K1 @9 dA. FlexVPN and DMVPN use IS-IS routing protocol to communicate with spokes
B. FlexVPN and DMVPN use the new key management protocol
4 t( i4 _6 S9 @9 ~. dC. FlexVPN and DMVPN use the same hashing algorithms
D. IOS routers run the same NHRP code for DMVPN and FlexVPN
0 G. l1 [# E2 u& E4 M% NCorrect Answer: D
QUESTION 31
, U3 v! t) A; ?Which functions of an SDN architecture require southbound APIs to enable communication?
) t2 j: `; k, ?/ P# xA. management console and the cloud
, Y1 j* g2 i) EB. management console and the SDN controller
% ~1 ?- r: E/ ]3 s1 e' {C. SDN controller and the cloud
D. SDN controller and the network elements
Correct Answer: D
QUESTION 32
# T& K+ L$ E9 j2 ?+ e, h8 |( YWhich two features of Cisco DNA Center are used in a Software Defined Network solution? (Choose two)
A. accounting
5 W( s* d. Z% q# [9 E% OB. encryption
C. assurance
D. automation
E. authentication
6 U, X* H/ |$ OCorrect Answer: CD

姜洪涛

QUESTION 33
The main function of northbound APIs in the SDN architecture is to enable communication between which two areas of a network?
  d/ W- \2 ^2 e, hA. SDN controller and the cloud
B. management console and the cloud
, r9 d8 k. S. o0 {" ~C. management console and the SDN controller
6 }2 S; p- I8 J( E3 dD. SDN controller and the management solution
Correct Answer: D
QUESTION 34
: _8 s/ a6 f7 fWhich two request of REST API are valid on the Cisco ASA Platform? (Choose two)
' ^5 ]- [  V% B% e2 UA. push
5 q0 ^8 y; j$ K# Y4 C& }B. options
+ e) r! f( M* w$ sC. connect
D. put
( k# i1 h" C* @8 fE. get
Correct Answer: AD

姜洪涛

35. Refer to the exhibit.
& \; }( i) w' x% h7 K8 a! ?3 ]% j' N
7 o& J: U  l- \6 P6 N# GWhat does the API do when connected to a Cisco security appliance?
6 [: s, Y8 A' M! VA. create an SNMP pull mechanism for managing AMP
% `3 w' ?5 ]4 R( L- V! M  e! O' xB. gather network telemetry information from AMP for endpoints
1 H( [+ N- D' P( {, V2 CC. get the process and PID information from the computers in the network
' Z) s9 \' }  b' e  E0 U- G. dD. gather the network interface information about the computers AMP sees
Correct Answer: D

姜洪涛

QUESTION 36
  N. m# D) T7 v, m. XRefer to the exhibit.
What is the result of this Python script of the Cisco DNA Center API?
A. adds a switch to Cisco DNA Center
B. adds authentication to a switch
C. receives information about a switch
) B* e! V  Z1 T$ |# Y6 k" D9 ICorrect Answer: A

姜洪涛

QUESTION 37
Which API is used for Content Security?
/ }8 m, f) m# E; [% OA. OpenVuln API
, C; t& e* {! j, b) I2 xB. IOS XR API
; h, |9 [  c* NC. NX-OS API
D. AsyncOS API
4 z3 l3 i# C: j7 W8 [* tCorrect Answer: D
QUESTION 38
. P. t( C- G. P' A5 k4 u& e( VWhich option is the main function of Cisco Firepower impact flags?
' R' _! C; i$ u- z- xA. They alert administrators when critical events occur.
2 ~% E9 m' P, i" ~1 N( MB. They identify data that the ASA sends to the Firepower module.
3 Z8 G1 B% L2 s8 R' J' c9 NC. They correlate data about intrusions and vulnerability.
6 Z0 b6 m" k- j- a% ED. They highlight known and suspected malicious IP addresses in reports.
1 P1 V5 a! D( e" p6 F  _4 ZCorrect Answer: C

姜洪涛

QUESTION 38
8 T% v( E4 @8 l3 |0 [) R0 NWhich option is the main function of Cisco Firepower impact flags?
A. They alert administrators when critical events occur.
# k. S9 G4 S, y  b. |9 RB. They identify data that the ASA sends to the Firepower module.
C. They correlate data about intrusions and vulnerability.
+ C& Q* A( @9 k% r2 Y; |D. They highlight known and suspected malicious IP addresses in reports.
* P- H% `4 n  r- eCorrect Answer:
C
QUESTION 39
4 t) y" v- E- k: C% AWhich two deployment model configurations are supported for Cisco FTDv in AWS? (Choose two)
& F5 F2 J, ^$ m7 a. @A. Cisco FTDv configured in routed mode and IPv6 configured
. |+ F% {- ]; J# HB. Cisco FTDv configured in routed mode and managed by a physical FMC appliance on premises
C. Cisco FTDv configured in routed mode and managed by an FMCv installed in AWS
5 b* Q8 ^/ i/ K. B2 N' J: q. P! xD. Cisco FTDv with two management interfaces and one traffic interface configured
- K0 K6 N) _+ q! ]  z- ME. Cisco FTDv with one management interface and two traffic interfaces configured
Correct Answer:
BC

姜洪涛

QUESTION 41
Which two deployment modes does the Cisco ASA FirePower module support? (Choose two)
A. routed mode
( z8 y2 t! l) p+ SB. active mode
C. transparent mode
D. inline mode
/ k% W* p7 A" k( Y) fE. passive monitor-only mode
5 s" h: L3 R# M3 n3 A- Q$ L1 \Correct Answer:
DE
# [+ K8 [$ o* M" N' IQUESTION 42
9 h/ v! m+ J+ R" ?: t3 A$ }Which feature is configured for managed devices in the device platform settings of the Firepower Management Center?
A. time synchronization
$ k( [* v: N" L( q5 \B. network address translations
C. quality of service
1 `; e, ?( s5 }0 j6 J6 U. t7 CD. intrusion policy
4 G' N! S  `0 b3 D7 k( BCorrect Answer:
  a9 a) n% ^! V) p/ O4 m1 C. YA

thamky

chrishk300

THX A LOT

jagger8881411

i want to study