Exams > Cisco > 350-701: Implementing and Operating Cisco Security Core Technologies
350-701: Implementing and Operating Cisco Security Core Technologies
Page 4 out of 52 pages Questions 31-40 out of 515 questions
Question#31

What is a benefit of using Cisco FMC over Cisco ASDM?

  • A. Cisco FMC uses Java while Cisco ASDM uses HTML5.
  • B. Cisco FMC provides centralized management while Cisco ASDM does not.
  • C. Cisco FMC supports pushing configurations to devices while Cisco ASDM does not.
  • D. Cisco FMC supports all firewall products whereas Cisco ASDM only supports Cisco ASA devices.
Discover Answer Hide Answer

B

Question#32

Which product allows Cisco FMC to push security intelligence observable to its sensors from other products?

  • A. Threat Intelligence Director
  • B. Encrypted Traffic Analytics.
  • C. Cognitive Threat Analytics.
  • D. Cisco Talos Intelligence
Discover Answer Hide Answer

A

Question#33

A Cisco FirePower administrator needs to configure a rule to allow a new application that has never been seen on the network. Which two actions should be selected to allow the traffic to pass without inspection? (Choose two.)

  • A. permit
  • B. allow
  • C. reset
  • D. trust
  • E. monitor
Discover Answer Hide Answer

BD

Question#34

What is a characteristic of a bridge group in a Cisco ASA Firewall running in transparent mode?

  • A. It has an IP address on its BVI interface and is used for management traffic.
  • B. It allows ARP traffic with a single access rule.
  • C. It includes multiple interfaces and access rules between interfaces are customizable.
  • D. It is a Layer 3 segment and includes one port and customizable access rules.
Discover Answer Hide Answer

C

Question#35

While using Cisco Firepower's Security Intelligence policies, which two criteria is blocking based upon? (Choose two.)

  • A. IP addresses
  • B. URLs
  • C. port numbers
  • D. protocol IDs
  • E. MAC addresses
Discover Answer Hide Answer

AB

Question#36

What features does Cisco FTDv provide over Cisco ASAv?

  • A. Cisco FTDv provides 1GB of firewall throughput while Cisco ASAv does not.
  • B. Cisco FTDv runs on VMware while Cisco ASAv does not.
  • C. Cisco FTDv runs on AWS while Cisco ASAv does not.
  • D. Cisco FTDv supports URL filtering while Cisco ASAv does not.
Discover Answer Hide Answer

D
Reference:
https://www.ciscolive.com/c/dam/r/ciscolive/apjc/docs/2018/pdf/BRKSEC-2064.pdf

Question#37

A network engineer is deciding whether to use stateful or stateless failover when configuring two Cisco ASAs for high availability. What is the connection status in both cases?

  • A. need to be reestablished with stateful failover and preserved with stateless failover
  • B. preserved with both stateful and stateless failover
  • C. need to be reestablished with both stateful and stateless failover
  • D. preserved with stateful failover and need to be reestablished with stateless failover
Discover Answer Hide Answer

D

Question#38

Which term describes when the Cisco Firepower downloads threat intelligence updates from Cisco Talos?

  • A. authoring
  • B. consumption
  • C. sharing
  • D. analysis
Discover Answer Hide Answer

B

Question#39

An administrator is configuring a DHCP server to better secure their environment. They need to be able to rate-limit the traffic and ensure that legitimate requests are not dropped. How would this be accomplished?

  • A. Set a trusted interface for the DHCP server.
  • B. Set the DHCP snooping bit to 1.
  • C. Enable ARP inspection for the required VLAN.
  • D. Add entries in the DHCP snooping database.
Discover Answer Hide Answer

A

Question#40

What is a prerequisite when integrating a Cisco ISE server and an AD domain?

  • A. Configure a common administrator account.
  • B. Place the Cisco ISE server and the AD server in the same subnet.
  • C. Synchronize the clocks of the Cisco ISE server and the AD server.
  • D. Configure a common DNS server.
Discover Answer Hide Answer

C
Reference:
https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/215233-identity-service-engine-ise-and-active.html#anc1

chevron rightPrevious Nextchevron right