Do you want to study on cisco 350-701 together?

hmhuo

学习了，感谢楼主分享！！！

姜洪涛

QUESTION 14
/ C9 Z5 U/ c  c6 w# ?Which PKI enrollment method allows the user to separate authentication and enrollment actions and also provides an option to specify HTTP/TFTP
/ F, W% j- Q" B( `/ {9 Z" m6 y- scommands to perform file retrieval from the server?
A. profile
B. url
C. terminal
D. selfsigned
Correct Answer: A
QUESTION 15
& V8 U% H, }3 ?% cWhich two risks is a company vulnerable to if it does not have a well-established patching solution for endpoints? (Choose two)
A. ARP spoofing
B. exploits
0 t4 ~4 g/ X5 @2 [) P) d! W  [C. malware
D. eavesdropping
0 S) ]6 |" O" S, M# C; ^E. denial-of-service attacks
* N" g7 m2 c3 \; y# ]6 ?Correct Answer: BC
& W# c1 W! P, _/ Q7 iQUESTION 16
$ N6 T6 m& E6 _- k3 R# KWhat are two rootkit types? (Choose two)
& u! L2 i, K1 G: w: TA. bootloader
# x& q/ r7 u* }  ~) V' dB. buffer mode
0 D' A' h# G1 p; ?. J+ qC. registry
D. virtual
9 B7 }* W$ g! v: eE. user mode
2 S$ l0 L# r0 S& H  Y. JCorrect Answer: A
QUESTION 17
Which threat involves software being used to gain unauthorized access to a computer system?
A. ping of death
B. HTTP flood
. H( v4 j# z$ c; vC. virus
D. NTP amplification
Correct Answer: C
QUESTION 18
4 N- i# Y4 M- pElliptic curve cryptography is a stronger more efficient cryptography method meant to replace which current encryption technology?
A. 3DES
B. DES
C. RSA
# X5 }; x' S4 D/ yD. AES
Correct Answer: C

姜洪涛

QUESTION 19
Which two descriptions of AES encryption are true? (Choose two)
" R  U" u( F' ]' B+ |- \  zA. AES is more secure than 3DES.
* `% o( c, M+ W" d" xB. AES can use a 168-bit key for encryption.
C. AES can use a 256-bit key for encryption.
D. AES encrypts and decrypts a key three times in sequence.
) i( G  |/ x5 @) IE. AES is less secure than 3DES.
2 C7 W2 L: N! F% w/ }9 b4 U) YCorrect Answer: AC
QUESTION 20
Which algorithm provides encryption and authentication for data plane communication?
A. SHA-96
B. SHA-384
C. AES-GCM
2 F" E" ~6 I2 R' @D. AES-256
Correct Answer: C
0 [; d. t/ K2 U4 S$ E5 PQUESTION 21
$ t; o- B4 Q8 ~5 t/ b! uWhich two key and block sizes are valid for AES? (Choose two)
A. 128-bit block size, 192-bit key length
7 i% X% D" o$ O8 b' vB. 128-bit block size, 256-bit key length
( b* r# Z1 {1 e3 j' kC. 64-bit block size, 168-bit key length
1 J( V5 Y& r$ _9 z1 d9 B8 I+ D& _D. 192-bit block size, 256-bit key length
E. 64-bit block size, 112-bit key length
" B( p5 Y6 k+ p1 JCorrect Answer: AB

姜洪涛

QUESTION 22
# C" X  h8 E% E; q" A4 QWhat is the result of running the crypto isakmp key ciscXXXXXXXX address 172.16.0.0 command?
! v* _- @) d! t, D3 D' r! jA. authenticates the IKEv2 peers in the 172.16.0.0/16 range by using the key ciscXXXXXXXX
B. authenticates the IP address of the 172.16.0.0/32 peer by using the key ciscXXXXXXXX
4 _- h$ g) e0 \' i& V: u( AC. authenticates the IKEv1 peers in the 172.16.0.0/16 range by using the key ciscXXXXXXXX
: ^& L: ~; u5 R0 B" nD. secures all the certificates in the IKE exchange by using the key ciscXXXXXXXX
9 q4 L5 O4 T8 O, T0 \Correct Answer: B
QUESTION 23
1 Y( x# @$ f+ o+ k& hWhich technology must be used to implement secure VPN connectivity among company branches over a private IP cloud with any-to-any scalable
connectivity?
A. DMVPN
B. FlexVPN
% x( u' V/ v6 B/ w6 ]8 C1 gC. IPsec DVTI
D. GET VPN
( E, M' ]6 {' o( O: {" rCorrect Answer: D
QUESTION 24
Which two conditions are prerequisites for stateful failover for IPsec? (Choose two)
A. Only the IKE configuration that is set up on the active device must be duplicated on the standby device; the IPsec configuration is copied
automatically
B. The active and standby devices can run different versions of the Cisco IOS software but must be the same type of device.
C. The IPsec configuration that is set up on the active device must be duplicated on the standby device
# o: |+ X' y* G1 KD. Only the IPsec configuration that is set up on the active device must be duplicated on the standby device; the IKE configuration is copied
automatically.
E. The active and standby devices must run the same version of the Cisco IOS software and must be the same type of device.
Correct Answer: CE

姜洪涛

QUESTION 25
9 s% ?) {( Y  v+ q" o# k) e! R9 MWhich VPN technology can support a multivendor environment and secure traffic between sites?
) E! I1 Z* l: L& p7 G' QA. SSL VPN
) D* M2 j1 l, T4 d! P! d1 WB. GET VPN
C. FlexVPN
; d/ R/ d6 K& }2 Q$ A' Q. OD. DMVPN
0 A, j  `, q1 K. U1 cCorrect Answer: B
QUESTION 26
A network engineer is configuring DMVPN and entered the crypto isakmp key cisc0380739941 address 0.0.0.0 command on hostA. The tunnel is not
) W) R* O# O" j, y( H( Y& Hbeing established to hostB. What action is needed to authenticate the VPN?
A. Change isakmp to ikev2 in the command on hostA.
6 e, y4 B$ c. c) }3 a. A( p8 A- jB. Enter the command with a different password on hostB.
' X' C8 m! |; N+ @" R! f, w, q5 Z6 JC. Enter the same command on hostB.
D. Change the password on hostA to the default password.
Correct Answer: C
* Q. e2 w0 e# c$ ~' @2 p8 K+ ~3 f/ pQUESTION 27
Refer to the exhibit.
1 P# j3 l# q  Q, T3 n* OA network administrator configured a site-to-site VPN tunnel between two Cisco IOS routers, and hosts are unable to communicate between two sites of
; w, c* R7 L0 R# n2 y, U6 S9 @2 CVPN. The network administrator runs the debug crypto isakmp sa command to track VPN status. What is the problem according to this command
$ R( t9 y4 f# @) B$ c( s9 Q7 Eoutput?
A. hashing algorithm mismatch
B. encryption algorithm mismatch
C. authentication key mismatch
# r7 O/ |, h$ }$ ZD. interesting traffic was not applied
Correct Answer: C
; N& Z5 Y+ m1 A' k5 pQUESTION 28
What is a difference between FlexVPN and DMVPN?
A. DMVPN uses IKEv1 or IKEv2, FlexVPN only uses IKEv1
B. DMVPN uses only IKEv1 FlexVPN uses only IKEv2
; c9 E2 J+ e- \$ ?0 sC. FlexVPN uses IKEv2, DMVPN uses IKEv1 or IKEv2
  \4 \* `: s9 ?" w8 O% SD. FlexVPN uses IKEv1 or IKEv2, DMVPN uses only IKEv2
5 p% m5 s* ]0 O# `6 Q7 dCorrect Answer: C

姜洪涛

QUESTION 29
Which protocol provides the strongest throughput performance when using Cisco AnyConnect VPN?
A. TLSv1.2
  t" q  `$ a& ~* j2 T8 P/ |( tB. TLSv1.1
8 ]1 I) h" |# w  Z/ c( E4 a3 j$ rC. BJTLSv1
3 p+ J" k' Z2 K: o+ tD. DTLSv1
1 T* R6 U' m4 f# L- {2 l- x7 TCorrect Answer:
D
5 l# A1 i, C( {1 h6 ?0 i6 m3 zQUESTION 30
What is a commonality between DMVPN and FlexVPN technologies?
2 ^! y) [  M7 r% KA. FlexVPN and DMVPN use IS-IS routing protocol to communicate with spokes
B. FlexVPN and DMVPN use the new key management protocol
9 x/ l, \# ~) e( mC. FlexVPN and DMVPN use the same hashing algorithms
D. IOS routers run the same NHRP code for DMVPN and FlexVPN
Correct Answer: D
  r4 Z* M" k/ h& H4 r+ ~- a& HQUESTION 31
$ o8 X. {5 u1 VWhich functions of an SDN architecture require southbound APIs to enable communication?
5 o4 |1 E# T$ c' l) e+ kA. management console and the cloud
B. management console and the SDN controller
; \1 ]3 L0 t- H4 I/ ^4 D! wC. SDN controller and the cloud
D. SDN controller and the network elements
Correct Answer: D
% R9 T. W9 f0 A3 E( x, F, ^% [% WQUESTION 32
* I, P1 g6 J: G/ \) mWhich two features of Cisco DNA Center are used in a Software Defined Network solution? (Choose two)
/ w" {. X8 F1 r& }, IA. accounting
% K$ m8 d" g' p# V( X' n% HB. encryption
C. assurance
: Z$ I6 X  ]8 n; xD. automation
E. authentication
' w7 C0 m: z4 D) H+ y1 ACorrect Answer: CD

姜洪涛

QUESTION 33
  E- V* ^* J, kThe main function of northbound APIs in the SDN architecture is to enable communication between which two areas of a network?
A. SDN controller and the cloud
B. management console and the cloud
C. management console and the SDN controller
D. SDN controller and the management solution
Correct Answer: D
QUESTION 34
* B0 F3 {( i9 ]: P6 d- {5 l1 lWhich two request of REST API are valid on the Cisco ASA Platform? (Choose two)
' z4 m- M: G3 B% N( z* `5 ~% lA. push
5 W- M2 V0 s% ~B. options
( [' C1 {$ V# H$ XC. connect
/ v. M7 L7 P$ Y) o& CD. put
) o0 U3 z0 h. @5 iE. get
  V# A0 O, E$ r% }0 }3 oCorrect Answer: AD

姜洪涛

35. Refer to the exhibit.
* b+ j2 W& B# W
# y: ^% k! {4 F2 `( A, K+ PWhat does the API do when connected to a Cisco security appliance?
A. create an SNMP pull mechanism for managing AMP
B. gather network telemetry information from AMP for endpoints
C. get the process and PID information from the computers in the network
; \7 p/ F. t6 n7 _% U* ~5 wD. gather the network interface information about the computers AMP sees
Correct Answer: D

姜洪涛

QUESTION 36
. z9 a/ |/ H2 vRefer to the exhibit.
What is the result of this Python script of the Cisco DNA Center API?
A. adds a switch to Cisco DNA Center
3 \7 l& c/ _2 m+ RB. adds authentication to a switch
  ^0 {* w% m0 \0 V( K4 HC. receives information about a switch
+ v% j, W, Z  W0 oCorrect Answer: A

姜洪涛

QUESTION 37
Which API is used for Content Security?
A. OpenVuln API
B. IOS XR API
( q' h" ]' x) P& L% X. }, QC. NX-OS API
6 |4 l# y8 n+ O/ O2 L  AD. AsyncOS API
Correct Answer: D
' U& A/ Y! q! \! kQUESTION 38
Which option is the main function of Cisco Firepower impact flags?
4 q& }4 b8 z+ @/ Q4 ]A. They alert administrators when critical events occur.
B. They identify data that the ASA sends to the Firepower module.
C. They correlate data about intrusions and vulnerability.
D. They highlight known and suspected malicious IP addresses in reports.
. v1 [! \& x  h! [2 ~5 d6 `6 JCorrect Answer: C

姜洪涛

QUESTION 38
Which option is the main function of Cisco Firepower impact flags?
1 T- ]4 Y7 m6 m* ]* P# dA. They alert administrators when critical events occur.
6 Y0 P" K- @9 MB. They identify data that the ASA sends to the Firepower module.
+ N& I% W( p; ^4 b3 e1 d# |3 uC. They correlate data about intrusions and vulnerability.
D. They highlight known and suspected malicious IP addresses in reports.
. l2 {; }5 ~; [$ `7 X  nCorrect Answer:
C
  t# L/ ^* l! K$ ?/ T. [- s" cQUESTION 39
$ J8 R* E+ [+ b# ]$ ~' |Which two deployment model configurations are supported for Cisco FTDv in AWS? (Choose two)
$ }7 g2 {: E: l  m4 hA. Cisco FTDv configured in routed mode and IPv6 configured
  |4 S1 I2 V) Q* YB. Cisco FTDv configured in routed mode and managed by a physical FMC appliance on premises
C. Cisco FTDv configured in routed mode and managed by an FMCv installed in AWS
D. Cisco FTDv with two management interfaces and one traffic interface configured
: v! @5 p  a/ K2 U" _E. Cisco FTDv with one management interface and two traffic interfaces configured
- F, F/ D+ H$ B. _! ?4 fCorrect Answer:
' C. _" y9 @3 N% o8 FBC

姜洪涛

QUESTION 41
Which two deployment modes does the Cisco ASA FirePower module support? (Choose two)
  H2 a# b5 @) Y! z; ^" ?A. routed mode
4 u$ V$ N6 m5 `7 o" sB. active mode
  T& ?3 ?1 @" p- R) n. O! T8 m5 FC. transparent mode
D. inline mode
E. passive monitor-only mode
Correct Answer:
DE
QUESTION 42
$ y' k3 _% u; B8 |+ A, _Which feature is configured for managed devices in the device platform settings of the Firepower Management Center?
A. time synchronization
B. network address translations
C. quality of service
D. intrusion policy
Correct Answer:
2 o) s6 L& Q1 ^4 OA

thamky

chrishk300

THX A LOT

jagger8881411

i want to study