New 350-701 Practice Exam For Passing SCOR 350-701 Exam [2022]

Regina2022-04-11T09:38:39+00:00

By Regina CCNP Security, Cisco, Free Questions Online

New 350-701 practice exam are updated by the IT professional team of ITExamShop, which ensure that you can pass Implementing and Operating Cisco Security Core Technologies (SCOR) certification exam in the first attempt. We include the latest Cisco 350-701 SCOR exam content in new 350-701 practice exam as soon as it is launched by new 350-701 CCNP Security SCOR exam. So, you can get benefit of new 350-701 practice exam without the hassle of scraping websites to find materials.

Cisco 350-701 Free Exam Questions Online

Page 1 of 3

1. Which security product enables administrators to deploy Kubernetes clusters in air-gapped sites without needing Internet access?

Cisco Content Platform

Cisco Container Controller

Cisco Container Platform

Cisco Cloud Platform

2. An engineer enabled SSL decryption for Cisco Umbrella intelligent proxy and needs to ensure that traffic is inspected without alerting end-users.

Which action accomplishes this goal?

Restrict access to only websites with trusted third-party signed certificates.

Modify the user’s browser settings to suppress errors from Cisco Umbrella.

Upload the organization root CA to Cisco Umbrella.

Install the Cisco Umbrella root CA onto the user’s device.

3. DRAG DROP

Drag and drop the descriptions from the left onto the encryption algorithms on the right.

4. What is the purpose of CA in a PKI?

To issue and revoke digital certificates

To validate the authenticity of a digital certificate

To create the private key for a digital certificate

To certify the ownership of a public key by the named subject

5. What is a function of 3DES in reference to cryptography?

It hashes files.

It creates one-time use passwords.

It encrypts traffic.

It generates private keys.

6. DRAG DROP

Drag and drop the cloud security assessment components from the left onto the definitions on the right.

7. Refer to the exhibit.

An organization is using DHCP Snooping within their network. A user on VLAN 41 on a new switch is complaining that an IP address is not being obtained.

Which command should be configured on the switch interface in order to provide the user with network connectivity?

ip dhcp snooping verify mac-address

ip dhcp snooping limit 41

ip dhcp snooping vlan 41

ip dhcp snooping trust

8. An organization wants to improve its cybersecurity processes and to add intelligence to its data. The organization wants to utilize the most current intelligence data for URL filtering, reputations, and vulnerability information that can be integrated with the Cisco FTD and Cisco WSA.

What must be done to accomplish these objectives?

Create a Cisco pxGrid connection to NIST to import this information into the security products for policy use

Create an automated download of the Internet Storm Center intelligence feed into the Cisco FTD and Cisco WSA databases to tie to the dynamic access control policies.

Download the threat intelligence feed from the IETF and import it into the Cisco FTD and Cisco WSA databases

Configure the integrations with Talos Intelligence to take advantage of the threat intelligence that it provides.

9. What are two functionalities of SDN Northbound APIs? (Choose two.)

Northbound APIs provide a programmable interface for applications to dynamically configure the network.

Northbound APIs form the interface between the SDN controller and business applications.

OpenFlow is a standardized northbound API protocol.

Northbound APIs use the NETCONF protocol to communicate with applications.

Northbound APIs form the interface between the SDN controller and the network switches or routers.

10. Which IETF attribute is supported for the RADIUS CoA feature?

24 State

30 Calling-Station-ID

42 Acct-Session-ID

81 Message-Authenticator

Page 2 of 3

11. Refer to the exhibit.

A network engineer is testing NTP authentication and realizes that any device synchronizes time with this router and that NTP authentication is not enforced.

What is the cause of this issue?

The key was configured in plain text.

NTP authentication is not enabled.

The hashing algorithm that was used was MD5. which is unsupported.

The router was not rebooted after the NTP configuration updated.

12. An engineer is implementing Cisco CES in an existing Microsoft Office 365 environment and must route inbound email to Cisco CE.. record must be modified to accomplish this task?

CNAME

SPF

DKIM

13. Which attack type attempts to shut down a machine or network so that users are not able to access it?

smurf

bluesnarfing

MAC spoofing

IP spoofing

14. In which situation should an Endpoint Detection and Response solution be chosen versus an Endpoint Protection Platform?

when there is a need for traditional anti-malware detection

when there is no need to have the solution centrally managed

when there is no firewall on the network

when there is a need to have more advanced detection capabilities

15. A Cisco FTD engineer is creating a new IKEv2 policy called s2s00123456789 for their organization to allow for additional protocols to terminate network devices with. They currently only have one policy established and need the new policy to be a backup in case some devices cannot support the stronger algorithms listed in the primary policy.

What should be done in order to support this?

Change the integrity algorithms to SHA* to support all SHA algorithms in the primary policy

Make the priority for the new policy 5 and the primary policy 1

Change the encryption to AES* to support all AES algorithms in the primary policy

Make the priority for the primary policy 10 and the new policy 1

16. Which solution for remote workers enables protection, detection, and response on the endpoint against known and unknown threats?

Cisco AMP for Endpoints

Cisco AnyConnect

Cisco Umbrella

Cisco Duo

17. Which Cisco security solution determines if an endpoint has the latest OS updates and patches installed on the system?

Cisco Endpoint Security Analytics

Cisco AMP for Endpoints

Endpoint Compliance Scanner

Security Posture Assessment Service

18. An organization is implementing URL blocking using Cisco Umbrella. The users are able to go to some sites but other sites are not accessible due to an error.

Why is the error occurring?

Client computers do not have the Cisco Umbrella Root CA certificate installed.

IP-Layer Enforcement is not configured.

Client computers do not have an SSL certificate deployed from an internal CA server.

Intelligent proxy and SSL decryption is disabled in the policy

19. Which parameter is required when configuring a Netflow exporter on a Cisco Router?

DSCP value

Source interface

Exporter name

Exporter description

20. An organization received a large amount of SPAM messages over a short time period. In order to take action on the messages, it must be determined how harmful the messages are and this needs to happen dynamically.

What must be configured to accomplish this?

Configure the Cisco WSA to modify policies based on the traffic seen

Configure the Cisco ESA to receive real-time updates from Talos

Configure the Cisco WSA to receive real-time updates from Talos

Configure the Cisco ESA to modify policies based on the traffic seen

Page 3 of 3

21. An administrator is trying to determine which applications are being used in the network but does not want the network devices to send metadata to Cisco Firepower.

Which feature should be used to accomplish this?

NetFlow

Packet Tracer

Network Discovery

Access Control

22. Which two aspects of the cloud PaaS model are managed by the customer but not the provider? (Choose two)

virtualization

middleware

operating systems

applications

data

23. What is an advantage of network telemetry over SNMP pulls?

accuracy

encapsulation

security

scalability

24. Which kind of API that is used with Cisco DNA Center provisions SSIDs, QoS policies, and update software versions on switches?

Integration

Intent

Event

Multivendor

25. For Cisco IOS PKI, which two types of Servers are used as a distribution point for CRLs? (Choose two)

SDP

LDAP

subordinate CA

SCP

HTTP

26. 1.In which scenario is endpoint-based security the solution?

inspecting encrypted traffic

device profiling and authorization

performing signature-based application control

inspecting a password-protected archive

27. How does DNS Tunneling exfiltrate data?

An attacker registers a domain that a client connects to based on DNS records and sends malware through that connection.

An attacker opens a reverse DNS shell to get into the client’s system and install malware on it.

An attacker uses a non-standard DNS port to gain access to the organization’s DNS servers in order to poison the resolutions.

An attacker sends an email to the target with hidden DNS resolvers in it to redirect them to a malicious domain.

28. What is the term for having information about threats and threat actors that helps mitigate harmful events that would otherwise compromise networks or systems?

trusted automated exchange

Indicators of Compromise

The Exploit Database

threat intelligence

Welcome To Choose Required IT Certification Exams Online

New 350-701 Practice Exam For Passing SCOR 350-701 Exam [2022]

Cisco 350-701 Free Exam Questions Online

Author