350-701試験無料問題集（727題）「Cisco Implementing and Operating Cisco Security Core Technologies 認定」

出題：1

An engineer is configuring Cisco WSA and needs to deploy it in transparent mode. Which configuration component must be used to accomplish this goal?

A. WCCP on switch

B. PBR on Cisco WSA

C. MDA on the router

D. DNS resolution on Cisco WSA

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

What is a difference between GRE over IPsec and IPsec with crypto map?

A. GRE over IPsec supports non-IP protocols.

B. GRE provides its own encryption mechanism.

C. IPsec with crypto map oilers better scalability.

D. Multicast traffic is supported by IPsec with crypto map.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

What are two differences between a Cisco Secure Web Appliance that is running in transparent mode and one running in explicit mode? (Choose two.)

A. The Cisco Secure Web Appliance is configured in a web browser only if it is running in transparent mode.

B. When the Cisco Secure Web Appliance is running in transparent mode, it uses the Secure Web Appliance's own IP address as the HTTP request destination.

C. The Cisco Secure Web Appliance responds with its own IP address only if it is running in transparent mode.

D. The Cisco Secure Web Appliance responds with its own IP address only if it is running in explicit mode.

E. The Cisco Secure Web Appliance uses a Layer 3 device to redirect traffic only if it is running in transparent mode.

正解：D,E 解答を投票する

出題：4

Drag and drop the solutions from the left onto the solution's benefits on the right.

正解：

Explanation:
Cisco Stealthwatch - rapidly collects and analyzes netflow and telementy data to deliver in-depth visibility and understanding of network traffic Cisco ISE - obtains contextual identity and profiles for all users and device Cisco TrustSec - software defined segmentation that uses SGTs Cisco Umbrella - secure internet gateway ion the cloud that provides a security solution

出題：5

What is a difference between GETVPN and IPsec?

A. GETVPN is based on IKEv2 and does not support IKEv1

B. GETVPN is used to build a VPN network with multiple sites without having to statically configure all devices

C. GETVPN provides key management and security association management

D. GETVPN reduces latency and provides encryption over MPLS without the use of a central hub

正解：A 解答を投票する

出題：6

Which policy does a Cisco Secure Web Appliance use to block or monitor URL requests based on the reputation score?

A. Enforcement Security

B. Cisco Data Security

C. Encryption

D. Outbound Malware Scanning

正解：A 解答を投票する

出題：7

Which Cisco DNA Center RESTful PNP API adds and claims a device into a workflow?

A. api/v1/onboarding/pnp-device

B. api/v1/onboarding/workflow

C. api/v1/fie/config

D. api/v1/onboarding/pnp-device/import

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

Which capability is exclusive to a Cisco AMP public cloud instance as compared to a private cloud instance?

A. ETHOS detection engine

B. RBAC

C. SPERO detection engine

D. TETRA detection engine

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

With regard to RFC 5176 compliance, how many IETF attributes are supported by the RADIUS CoA feature?

A. 5

B. 12

C. 3

D. 10

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：10

Which cloud service model offers an environment for cloud consumers to develop and deploy applications without needing to manage or maintain the underlying cloud infrastructure?

A. PaaS

B. IaaS

C. XaaS

D. SaaS

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：11

Which Cisco platform onboards the endpoint and can issue a CA signed certificate while also automatically configuring endpoint network settings to use the signed endpoint certificate, allowing the endpoint to gain network access?

A. Cisco NAC

B. Cisco WSA

C. Cisco TACACS+

D. Cisco ISE

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：12

An engineer recently completed the system setup on a Cisco WSA Which URL information does the system send to SensorBase Network servers?

A. complete URL,without obfuscating the path segments

B. URL information collected from clients that connect to the Cisco WSA using Cisco AnyConnect

C. none because SensorBase Network Participation is disabled by default

D. Summarized server-name information and MD5-hashed path information

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：13

Which flaw does an attacker leverage when exploiting SQL injection vulnerabilities?

A. web page images

B. database

C. user input validation in a web page or web application

D. Linux and Windows operating systems

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：14

An organization is implementing URL blocking using Cisco Umbrella. The users are able to go to some sites but other sites are not accessible due to an error. Why is the error occurring?

A. Client computers do not have the Cisco Umbrella Root CA certificate installed.

B. IP-Layer Enforcement is not configured.

C. Intelligent proxy and SSL decryption is disabled in the policy

D. Client computers do not have an SSL certificate deployed from an internal CA server.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：15

Why should organizations migrate to an MFA strategy for authentication?

A. MFA does not require any piece of evidence for an authentication mechanism.

B. MFA methods of authentication are never compromised.

C. Biometrics authentication leads to the need for MFA due to its ability to be hacked easily.

D. Single methods of authentication can be compromised more easily than MFA.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：16

An engineer is configuring a Cisco ESA and wants to control whether to accept or reject email messages to a recipient address. Which list contains the allowed recipient addresses?

A. BAT

B. SAT

C. HAT

D. RAT

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：17

An engineer is configuring their router to send NetfFow data to Stealthwatch which has an IP address of 1 1
11 using the flow record Stea!thwatch406397954 command Which additional command is required to complete the flow record?

A. destination 1.1.1.1

B. cache timeout active 60

C. transport udp 2055

D. match ipv4 ttl

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：18

What is an advantage of using a next-generation firewall compared to a traditional firewall?

A. Next-generation firewalls use dynamic packet filtering, and traditional firewalls use static packet filtering.

B. Next-generation firewalls have stateless inspection capabilities, and traditional firewalls use stateful inspection.

C. Next-generation firewalls have threat intelligence feeds, and traditional firewalls use signature detection.

D. Next-generation firewalls use intrusion prevention policies, and traditional firewalls use intrusion detection policies.

正解：C 解答を投票する

350-701試験無料問題集「Cisco Implementing and Operating Cisco Security Core Technologies 認定」