Rebirth 350-701 Free Demo For Implementing And Operating Cisco Security Core Technologies Certification

NEW QUESTION 1

An engineer is configuring Cisco WSA and needs to deploy it in transparent mode. Which configuration component must be used to accomplish this goal?

• A. MDA on the router
• B. PBR on Cisco WSA
• C. WCCP on switch
• D. DNS resolution on Cisco WSA

Answer: C

NEW QUESTION 2

What is a benefit of using a multifactor authentication strategy?

• A. It provides visibility into devices to establish device trust.
• B. It provides secure remote access for applications.
• C. It provides an easy, single sign-on experience against multiple applications
• D. lt protects data by enabling the use of a second validation of identity.

Answer: D

NEW QUESTION 3

An engineer adds a custom detection policy to a Cisco AMP deployment and encounters issues with the configuration. The simple detection mechanism is configured, but the dashboard indicates that the hash is not 64 characters and is non-zero. What is the issue?

• A. The engineer is attempting to upload a hash created using MD5 instead of SHA-256
• B. The file being uploaded is incompatible with simple detections and must use advanced detections
• C. The hash being uploaded is part of a set in an incorrect format
• D. The engineer is attempting to upload a file instead of a hash

Answer: A

NEW QUESTION 4

What is a characteristic of a bridge group in ASA Firewall transparent mode?

• A. It includes multiple interfaces and access rules between interfaces are customizable
• B. It is a Layer 3 segment and includes one port and customizable access rules
• C. It allows ARP traffic with a single access rule
• D. It has an IP address on its BVI interface and is used for management traffic

Answer: A

Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/asa/asa95/configuration/general/asa-95-generalconfig/intro-fw.h BVI interface is not used for management purpose. But we can add a separate Management slot/port interface that is not part of any bridge group, and that allows only management traffic to the ASA.

NEW QUESTION 5

A network engineer has entered the snmp-server user andy myv3 auth sha cisco priv aes 256 cisc0380739941 command and needs to send SNMP information to a host at 10.255.254.1. Which command achieves this goal?

• A. snmp-server host inside 10.255.254.1 version 3 andy
• B. snmp-server host inside 10.255.254.1 version 3 myv3
• C. snmp-server host inside 10.255.254.1 snmpv3 andy
• D. snmp-server host inside 10.255.254.1 snmpv3 myv3

Answer: A

Explanation:
The command “snmp-server user user-name group-name [remote ip-address [udp-port port]]
{v1 | v2c | v3 [encrypted] [auth {md5 | sha} auth-password]} [access access-list]” adds a new user (in this case “andy”) to an SNMPv3 group (in this case group name “myv3”) and configures a password for the user.In the “snmp-server host” command, we need to:+ Specify the SNMP version with key word “version {1 | 2 | 3}”+ Specify the username (“andy”), not group name (“myv3”).Note: In “snmp-server host inside …” command, “inside” is the interface name of the ASA interface through which the NMS (located at 10.255.254.1) can be reached.

NEW QUESTION 6

Which deployment model is the most secure when considering risks to cloud adoption?

• A. Public Cloud
• B. Hybrid Cloud
• C. Community Cloud
• D. Private Cloud

Answer: D

NEW QUESTION 7

Which DevSecOps implementation process gives a weekly or daily update instead of monthly or quarterly in the applications?

• A. Orchestration
• B. CI/CD pipeline
• C. Container
• D. Security

Answer: B

Explanation:
Reference: https://devops.com/how-to-implement-an-effective-ci-cd-pipeline/

NEW QUESTION 8

Which functions of an SDN architecture require southbound APIs to enable communication?

• A. SDN controller and the network elements
• B. management console and the SDN controller
• C. management console and the cloud
• D. SDN controller and the cloud

Answer: A

Explanation:
The Southbound API is used to communicate between Controllers and network devices

NEW QUESTION 9

A Cisco ESA network administrator has been tasked to use a newly installed service to help create policy based on the reputation verdict. During testing, it is discovered that the Cisco ESA is not dropping files that have an undetermined verdict. What is causing this issue?

• A. The policy was created to send a message to quarantine instead of drop
• B. The file has a reputation score that is above the threshold
• C. The file has a reputation score that is below the threshold
• D. The policy was created to disable file analysis

Answer: D

Explanation:
Maybe the “newly installed service” in this Qmentions about Advanced Malware Protection (AMP) which can be used along with ESA. AMP allows superior protection across the attack continuum.+ File Reputation – captures a fingerprint of each file as it traverses the ESA and sends it to AMP’s cloudbased intelligence network for a reputation verdict. Given these results, you can automatically block malicious files and apply administrator-defined policy.+ File Analysis – provides the ability to analyze unknown files that are traversing the ESA. A highly secure sandbox environment enables AMP to glean precise details about the
file’s behavior and to combine that data with detailed human and machine analysis to determine the file’s threat level. This disposition is then fed into AMP cloud-based intelligence network and used to dynamically update and expand the AMP cloud data set for enhanced protection

NEW QUESTION 10

What is the purpose of the Cisco Endpoint loC feature?

• A. It provides stealth threat prevention.
• B. lt is a signature-based engine.
• C. lt is an incident response tool
• D. It provides precompromise detection.

Answer: C

Explanation:
https://www.cisco.com/c/dam/en_us/about/doing_business/legal/service_descriptions/docs/Cisco_Secure_Mana

NEW QUESTION 11

Which two features are used to configure Cisco ESA with a multilayer approach to fight viruses and malware? (Choose two)

• A. Sophos engine
• B. white list
• C. RAT
• D. outbreak filters
• E. DLP

Answer: AD

NEW QUESTION 12

Refer to the exhibit.

Refer to the exhibit. A Cisco ISE administrator adds a new switch to an 802.1X deployment and has difficulty with some endpoints gaining access.
Most PCs and IP phones can connect and authenticate using their machine certificate credentials. However printer and video cameras cannot base d on the interface configuration provided, what must be to get these devices on to the network using Cisco ISE for authentication and authorization while maintaining security controls?

• A. Change the default policy in Cisco ISE to allow all devices not using machine authentication .
• B. Enable insecure protocols within Cisco ISE in the allowed protocols configuration.
• C. Configure authentication event fail retry 2 action authorize vlan 41 on the interface
• D. Add mab to the interface configuration.

Answer: D

NEW QUESTION 13

Which solution stops unauthorized access to the system if a user's password is compromised?

• A. VPN
• B. MFA
• C. AMP
• D. SSL

Answer: B

NEW QUESTION 14

An engineer configured a new network identity in Cisco Umbrella but must verify that traffic is being routed through the Cisco Umbrella network. Which action tests the routing?

• A. Ensure that the client computers are pointing to the on-premises DNS servers.
• B. Enable the Intelligent Proxy to validate that traffic is being routed correctly.
• C. Add the public IP address that the client computers are behind to a Core Identity.
• D. Browse to http://welcome.umbrella.com/ to validate that the new identity is working.

Answer: B

NEW QUESTION 15

An engineer must modify a policy to block specific addresses using Cisco Umbrella. The policy is created already and is actively u: of the default policy elements. What else must be done to accomplish this task?

• A. Add the specified addresses to the identities list and create a block action.
• B. Create a destination list for addresses to be allowed or blocked.
• C. Use content categories to block or allow specific addresses.
• D. Modify the application settings to allow only applications to connect to required addresses.

Answer: B

NEW QUESTION 16

Which two capabilities does TAXII support? (Choose two)

• A. Exchange
• B. Pull messaging
• C. Binding
• D. Correlation
• E. Mitigating

Answer: AB

Explanation:
The Trusted Automated eXchangeof Indicator Information (TAXII) specifies mechanisms for exchangingstructured cyber threat information between parties over the network.TAXII exists to provide specific capabilities to those interested in sharing structured cyber threat information.TAXII Capabilities are the highest level at which TAXII actions can be described. There are three capabilitiesthat this version of TAXII supports: push messaging, pull messaging, and discovery.Although there is no “binding” capability in the list but it is the best answer here.

NEW QUESTION 17

Which two Cisco ISE components must be configured for BYOD? (Choose two.)

• A. local WebAuth
• B. central WebAuth
• C. null WebAuth
• D. guest
• E. dual

Answer: BD

NEW QUESTION 18

Which component of Cisco umbrella architecture increases reliability of the service?

• A. Anycast IP
• B. AMP Threat grid
• C. Cisco Talos
• D. BGP route reflector

Answer: C

NEW QUESTION 19

In which scenario is endpoint-based security the solution?

• A. inspecting encrypted traffic
• B. device profiling and authorization
• C. performing signature-based application control
• D. inspecting a password-protected archive

Answer: C

NEW QUESTION 20
......