Do you want to study on cisco 350-701 together?

hmhuo

学习了，感谢楼主分享！！！

姜洪涛

QUESTION 14
Which PKI enrollment method allows the user to separate authentication and enrollment actions and also provides an option to specify HTTP/TFTP
1 ^4 D" e$ k7 ?" W' f* Vcommands to perform file retrieval from the server?
A. profile
B. url
C. terminal
. y! l6 G2 j% @1 T) s5 hD. selfsigned
Correct Answer: A
QUESTION 15
1 E/ _% ~- @1 I3 y! u8 C9 AWhich two risks is a company vulnerable to if it does not have a well-established patching solution for endpoints? (Choose two)
7 _5 ~# Z2 P& h. W3 M  t, rA. ARP spoofing
) c3 F7 I/ w9 XB. exploits
C. malware
& D0 s8 o' j- AD. eavesdropping
E. denial-of-service attacks
7 p8 W. q- p' f) n2 K. VCorrect Answer: BC
$ z& v, E) Z0 I; RQUESTION 16
What are two rootkit types? (Choose two)
9 M& m% z4 s) M& E. i' {; L8 M; }A. bootloader
B. buffer mode
( X% @4 }" P- L2 ~. g& s: GC. registry
9 j1 d5 r! i5 KD. virtual
4 H* _5 J% y" `6 R+ f" H, m, oE. user mode
6 y5 D1 ^* A( M- ECorrect Answer: A
1 ~2 ^' e4 R/ KQUESTION 17
Which threat involves software being used to gain unauthorized access to a computer system?
A. ping of death
+ I0 R9 x2 `/ i+ c: C. J/ x+ cB. HTTP flood
C. virus
4 a2 U. w0 W8 A3 lD. NTP amplification
) {' _9 b7 Y) T3 n1 m' ACorrect Answer: C
: U: i8 P; ?" e! H) Y  [$ SQUESTION 18
Elliptic curve cryptography is a stronger more efficient cryptography method meant to replace which current encryption technology?
% Y+ y" i2 u& i+ ?3 L2 pA. 3DES
3 w8 |; X! {6 Y  CB. DES
C. RSA
D. AES
Correct Answer: C

姜洪涛

QUESTION 19
: d/ l1 A! L, X7 T$ \- m8 ^7 f% e+ S; eWhich two descriptions of AES encryption are true? (Choose two)
; l& `. {/ L  H/ P( C. [A. AES is more secure than 3DES.
B. AES can use a 168-bit key for encryption.
& B2 G9 b$ J1 w7 y/ t4 fC. AES can use a 256-bit key for encryption.
D. AES encrypts and decrypts a key three times in sequence.
E. AES is less secure than 3DES.
Correct Answer: AC
9 E+ z* J5 `& E- D% s6 P: KQUESTION 20
Which algorithm provides encryption and authentication for data plane communication?
A. SHA-96
B. SHA-384
* D. z* q* X5 V. N! _C. AES-GCM
  E' y8 S9 w& e* PD. AES-256
Correct Answer: C
, p+ W: X" N# B8 t. @. m  aQUESTION 21
# ~& G# x0 F9 m3 {! V/ k. fWhich two key and block sizes are valid for AES? (Choose two)
% q! c4 D- o$ ]9 y! S2 eA. 128-bit block size, 192-bit key length
B. 128-bit block size, 256-bit key length
4 L& L8 y% r. @6 V$ W' h9 q. ?2 E1 ]9 VC. 64-bit block size, 168-bit key length
D. 192-bit block size, 256-bit key length
8 d  {: I7 n* ZE. 64-bit block size, 112-bit key length
# _  J, w! T6 `Correct Answer: AB

姜洪涛

QUESTION 22
1 g) ~: c& C0 d2 A9 A  S2 `What is the result of running the crypto isakmp key ciscXXXXXXXX address 172.16.0.0 command?
: I; n* x) a( y3 m: r9 z: ]! kA. authenticates the IKEv2 peers in the 172.16.0.0/16 range by using the key ciscXXXXXXXX
B. authenticates the IP address of the 172.16.0.0/32 peer by using the key ciscXXXXXXXX
C. authenticates the IKEv1 peers in the 172.16.0.0/16 range by using the key ciscXXXXXXXX
& [7 o. O( e( LD. secures all the certificates in the IKE exchange by using the key ciscXXXXXXXX
1 p. R9 y+ c7 e6 R- }Correct Answer: B
QUESTION 23
3 q$ X% h; Q5 M5 T9 QWhich technology must be used to implement secure VPN connectivity among company branches over a private IP cloud with any-to-any scalable
connectivity?
/ t; g, q1 @" P( \8 k) K, ~+ kA. DMVPN
( C9 U7 {+ v1 d/ ?/ b6 l5 J0 m0 JB. FlexVPN
% {# M$ V; b+ n4 }' F( XC. IPsec DVTI
" E$ r% b8 D# q, x$ {% hD. GET VPN
Correct Answer: D
QUESTION 24
Which two conditions are prerequisites for stateful failover for IPsec? (Choose two)
3 O- h/ M* w7 E, I6 MA. Only the IKE configuration that is set up on the active device must be duplicated on the standby device; the IPsec configuration is copied
automatically
B. The active and standby devices can run different versions of the Cisco IOS software but must be the same type of device.
5 l6 z$ h6 Y( RC. The IPsec configuration that is set up on the active device must be duplicated on the standby device
$ S; `5 k: w! J+ @  p3 kD. Only the IPsec configuration that is set up on the active device must be duplicated on the standby device; the IKE configuration is copied
$ r( W- k1 C2 G5 T1 e0 a/ Tautomatically.
E. The active and standby devices must run the same version of the Cisco IOS software and must be the same type of device.
Correct Answer: CE

姜洪涛

QUESTION 25
Which VPN technology can support a multivendor environment and secure traffic between sites?
* S+ _' m6 N- X, |2 D: _A. SSL VPN
, x- p0 `4 E5 |- e0 Q3 \( L: gB. GET VPN
0 L+ [: ?/ U4 E5 K1 }C. FlexVPN
D. DMVPN
Correct Answer: B
1 g4 f+ C- g) N  U! j: }QUESTION 26
9 q0 f+ S4 j2 lA network engineer is configuring DMVPN and entered the crypto isakmp key cisc0380739941 address 0.0.0.0 command on hostA. The tunnel is not
* z8 D& b; [$ I7 B0 E* c! Hbeing established to hostB. What action is needed to authenticate the VPN?
$ y$ f1 W3 B2 e& KA. Change isakmp to ikev2 in the command on hostA.
B. Enter the command with a different password on hostB.
C. Enter the same command on hostB.
1 u; j' H& ?8 L  L! VD. Change the password on hostA to the default password.
% z8 r: W# y4 Q2 _$ x9 ^2 GCorrect Answer: C
5 P9 {6 ?: b, ]9 D" R' M- DQUESTION 27
& ~8 b% g6 R3 [Refer to the exhibit.
A network administrator configured a site-to-site VPN tunnel between two Cisco IOS routers, and hosts are unable to communicate between two sites of
VPN. The network administrator runs the debug crypto isakmp sa command to track VPN status. What is the problem according to this command
output?
A. hashing algorithm mismatch
2 ^; e! }! V# M2 W2 L4 oB. encryption algorithm mismatch
C. authentication key mismatch
6 P% u) |0 X, t% e; TD. interesting traffic was not applied
, E! [4 j- `5 T* ^7 sCorrect Answer: C
" l% I' f9 V* T, q  U+ L' m& aQUESTION 28
; R- U: G/ Q$ m3 v" I+ wWhat is a difference between FlexVPN and DMVPN?
A. DMVPN uses IKEv1 or IKEv2, FlexVPN only uses IKEv1
. F6 D% E& s, V# Q3 BB. DMVPN uses only IKEv1 FlexVPN uses only IKEv2
C. FlexVPN uses IKEv2, DMVPN uses IKEv1 or IKEv2
D. FlexVPN uses IKEv1 or IKEv2, DMVPN uses only IKEv2
% X0 K, ~) ?$ x0 J# s) d* |7 u6 P; l2 hCorrect Answer: C

姜洪涛

QUESTION 29
, s" u9 A; V0 n  [7 ?6 gWhich protocol provides the strongest throughput performance when using Cisco AnyConnect VPN?
A. TLSv1.2
B. TLSv1.1
: j5 n, z% b8 E" u1 s2 ~  \4 tC. BJTLSv1
D. DTLSv1
Correct Answer:
1 z) {$ o  f% a, D$ cD
QUESTION 30
What is a commonality between DMVPN and FlexVPN technologies?
5 [9 D5 L; W( a# i0 K9 [$ {A. FlexVPN and DMVPN use IS-IS routing protocol to communicate with spokes
! \+ V3 ]' O! ]- d* q: TB. FlexVPN and DMVPN use the new key management protocol
9 |, k5 N+ \, s* e# |C. FlexVPN and DMVPN use the same hashing algorithms
$ [' D% _: k2 e. a- g) ED. IOS routers run the same NHRP code for DMVPN and FlexVPN
$ n: t3 O3 l) a' [1 K5 CCorrect Answer: D
& }+ n3 h4 V& C; w1 c+ a0 }QUESTION 31
Which functions of an SDN architecture require southbound APIs to enable communication?
A. management console and the cloud
B. management console and the SDN controller
C. SDN controller and the cloud
* B) N7 U& H* ]( ]8 S" e3 ?D. SDN controller and the network elements
: L. d& d. q7 H) T/ {Correct Answer: D
; z! U0 d# ~" e8 B! c: `QUESTION 32
Which two features of Cisco DNA Center are used in a Software Defined Network solution? (Choose two)
A. accounting
B. encryption
* X) V. F6 O$ IC. assurance
D. automation
E. authentication
Correct Answer: CD

姜洪涛

QUESTION 33
  H- G$ i; h& F9 EThe main function of northbound APIs in the SDN architecture is to enable communication between which two areas of a network?
( |: E4 T) t& BA. SDN controller and the cloud
# C4 S# ?4 u3 S& K4 yB. management console and the cloud
C. management console and the SDN controller
& O1 P6 c; b. a3 `  D: @* @5 M% G$ _D. SDN controller and the management solution
; W0 K3 |! E% r4 M3 h% w9 eCorrect Answer: D
QUESTION 34
Which two request of REST API are valid on the Cisco ASA Platform? (Choose two)
' V+ Z- o* x+ P$ w: CA. push
B. options
C. connect
. r' T0 G; G, u4 ^$ A! n' N& AD. put
E. get
Correct Answer: AD

姜洪涛

35. Refer to the exhibit.

; j+ Y4 w2 G1 p9 p' O+ D! B8 QWhat does the API do when connected to a Cisco security appliance?
- D5 K! A, l2 [/ Z1 K" XA. create an SNMP pull mechanism for managing AMP
B. gather network telemetry information from AMP for endpoints
$ X. k, \, G- K0 y7 ^C. get the process and PID information from the computers in the network
! G; H3 a' I9 M& M/ _! }2 T6 JD. gather the network interface information about the computers AMP sees
Correct Answer: D

姜洪涛

QUESTION 36
Refer to the exhibit.
What is the result of this Python script of the Cisco DNA Center API?
A. adds a switch to Cisco DNA Center
; _/ a7 u/ D6 MB. adds authentication to a switch
C. receives information about a switch
Correct Answer: A

姜洪涛

QUESTION 37
( h5 R1 i& `# K1 ?3 n( {9 b* o- xWhich API is used for Content Security?
A. OpenVuln API
) u! p- I6 X3 E) |$ e6 E, rB. IOS XR API
* G% l! R1 T! T* M$ e6 Y) ZC. NX-OS API
D. AsyncOS API
Correct Answer: D
8 Z1 V$ w$ G5 N# p5 X: X# L4 KQUESTION 38
Which option is the main function of Cisco Firepower impact flags?
A. They alert administrators when critical events occur.
B. They identify data that the ASA sends to the Firepower module.
C. They correlate data about intrusions and vulnerability.
7 z# w* `- F5 t! k8 s8 C; O8 i7 JD. They highlight known and suspected malicious IP addresses in reports.
Correct Answer: C

姜洪涛

QUESTION 38
: h4 Y2 M9 u5 k1 A. AWhich option is the main function of Cisco Firepower impact flags?
$ |$ o! \9 g; d( E% _A. They alert administrators when critical events occur.
B. They identify data that the ASA sends to the Firepower module.
C. They correlate data about intrusions and vulnerability.
, H' c) p& I) [4 ?0 d1 dD. They highlight known and suspected malicious IP addresses in reports.
Correct Answer:
C
4 \, y' F9 |$ p0 x- o( AQUESTION 39
Which two deployment model configurations are supported for Cisco FTDv in AWS? (Choose two)
& S2 H3 D9 B( `# o( ~& ~A. Cisco FTDv configured in routed mode and IPv6 configured
B. Cisco FTDv configured in routed mode and managed by a physical FMC appliance on premises
C. Cisco FTDv configured in routed mode and managed by an FMCv installed in AWS
! f* W7 M& {0 x3 Z9 eD. Cisco FTDv with two management interfaces and one traffic interface configured
E. Cisco FTDv with one management interface and two traffic interfaces configured
Correct Answer:
BC

姜洪涛

QUESTION 41
Which two deployment modes does the Cisco ASA FirePower module support? (Choose two)
A. routed mode
7 \* D7 r8 k4 w; l+ ~  BB. active mode
C. transparent mode
& I0 o' N0 c4 b! dD. inline mode
5 C+ M1 s1 A1 r7 vE. passive monitor-only mode
Correct Answer:
, B2 c3 W( A/ @& H& d$ ]DE
/ d; d! G+ \# f; [. Q' _6 _5 [QUESTION 42
  {5 O+ D- d! Y6 V, qWhich feature is configured for managed devices in the device platform settings of the Firepower Management Center?
A. time synchronization
B. network address translations
: A) |; A9 |' P3 u, F; pC. quality of service
/ K: v: t; L' k+ GD. intrusion policy
/ A; z7 G; d0 N% {/ ~+ v3 V2 Z, ~Correct Answer:
/ a' v0 V0 R6 G" rA

thamky

chrishk300

THX A LOT

jagger8881411

i want to study