A Review Of Tested 350-701 Testing Bible

NEW QUESTION 1

Which type of dashboard does Cisco DNA Center provide for complete control of the network?

• A. service management
• B. centralized management
• C. application management
• D. distributed management

Answer: B

Explanation:
Reference: https://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/dna-center/nb-06- dna-center-faq-cte-en.html

NEW QUESTION 2

A network engineer is configuring NetFlow top talkers on a Cisco router Drag and drop the steps in the process from the left into the sequence on the right

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 3

Which security solution uses NetFlow to provide visibility across the network, data center, branch offices, and cloud?

• A. Cisco CTA
• B. Cisco Stealthwatch
• C. Cisco Encrypted Traffic Analytics
• D. Cisco Umbrella

Answer: B

NEW QUESTION 4

Refer to the exhibit.

A network engineer is testing NTP authentication and realizes that any device synchronizes time with this router and that NTP authentication is not enforced What is the cause of this issue?

• A. The key was configured in plain text.
• B. NTP authentication is not enabled.
• C. The hashing algorithm that was used was MD5. which is unsupported.
• D. The router was not rebooted after the NTP configuration updated.

Answer: B

NEW QUESTION 5

Elliptic curve cryptography is a stronger more efficient cryptography method meant to replace which current encryption technology?

• A. 3DES
• B. RSA
• C. DES
• D. AES

Answer: B

Explanation:

Compared to RSA, the prevalent public-key cryptography of the Internet today, Elliptic Curve Cryptography (ECC) offers smaller key sizes, faster computation,as well as memory, energy and bandwidth savings and is thus better suited forsmall devices.

NEW QUESTION 6

Which Cisco ASA deployment model is used to filter traffic between hosts in the same IP subnet using higher-level protocols without readdressing the network?

• A. routed mode
• B. transparent mode
• C. single context mode
• D. multiple context mode

Answer: B

NEW QUESTION 7

What does the Cloudlock Apps Firewall do to mitigate security concerns from an application perspective?

• A. It allows the administrator to quarantine malicious files so that the application can function, just not maliciously.
• B. It discovers and controls cloud apps that are connected to a company’s corporate environment.
• C. It deletes any application that does not belong in the network.
• D. It sends the application information to an administrator to act on.

Answer: B

NEW QUESTION 8

What are two characteristics of the RESTful architecture used within Cisco DNA Center? (Choose two.)

• A. REST uses methods such as GET, PUT, POST, and DELETE.
• B. REST codes can be compiled with any programming language.
• C. REST is a Linux platform-based architecture.
• D. The POST action replaces existing data at the URL path.
• E. REST uses HTTP to send a request to a web service.

Answer: AE

NEW QUESTION 9

Which feature requires that network telemetry be enabled?

• A. per-interface stats
• B. SNMP trap notification
• C. Layer 2 device discovery
• D. central syslog system

Answer: D

NEW QUESTION 10

Drag and drop the VPN functions from the left onto the description on the right.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 11

What are two ways that Cisco Container Platform provides value to customers who utilize cloud service providers? (Choose two.)

• A. Allows developers to create code once and deploy to multiple clouds
• B. helps maintain source code for cloud deployments
• C. manages Docker containers
• D. manages Kubernetes clusters
• E. Creates complex tasks for managing code

Answer: AE

NEW QUESTION 12

A malicious user gained network access by spoofing printer connections that were authorized using MAB on four different switch ports at the same time. What two catalyst switch security features will prevent further violations? (Choose two)

• A. DHCP Snooping
• B. 802.1AE MacSec
• C. Port security
• D. IP Device track
• E. Dynamic ARP inspection
• F. Private VLANs

Answer: AE

NEW QUESTION 13

Which policy is used to capture host information on the Cisco Firepower Next Generation Intrusion Prevention System?

• A. Correlation
• B. Intrusion
• C. Access Control
• D. Network Discovery

Answer: D

Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-configguide-v64/introd

NEW QUESTION 14

Which technology should be used to help prevent an attacker from stealing usernames and passwords of users within an organization?

• A. RADIUS-based REAP
• B. fingerprinting
• C. Dynamic ARP Inspection
• D. multifactor authentication

Answer: D

NEW QUESTION 15

Due to a traffic storm on the network, two interfaces were error-disabled, and both interfaces sent SNMP traps.
Which two actions must be taken to ensure that interfaces are put back into service? (Choose two)

• A. Have Cisco Prime Infrastructure issue an SNMP set command to re-enable the ports after the pre configured interval.
• B. Use EEM to have the ports return to service automatically in less than 300 seconds.
• C. Enter the shutdown and no shutdown commands on the interfaces.
• D. Enable the snmp-server enable traps command and wait 300 seconds
• E. Ensure that interfaces are configured with the error-disable detection and recovery feature

Answer: CE

Explanation:
You can also bring up the port by using these commands:+ The “shutdown” interface configuration command followed by the “no shutdown” interface configurationcommand restarts the disabled port.+ The “errdisable recovery cause …” global configuration command enables the timer to automatically recover error-disabled state, and the “errdisable recovery interval interval” global configuration command specifies the time to recover error-disabled state.

NEW QUESTION 16

Client workstations are experiencing extremely poor response time. An engineer suspects that an attacker is eavesdropping and making independent connections while relaying messages between victims to make them think they are talking to each other over a private connection. Which feature must be enabled and configured to provide relief from this type of attack?

• A. Link Aggregation
• B. Reverse ARP
• C. private VLANs
• D. Dynamic ARP Inspection

Answer: D

NEW QUESTION 17

Which API method and required attribute are used to add a device into Cisco DNA Center with the native API?

• A. GET and serialNumber
• B. userSudiSerlalNos and deviceInfo
• C. POST and name
• D. lastSyncTime and pid

Answer: A

NEW QUESTION 18

Which two aspects of the cloud PaaS model are managed by the customer but not the provider? (Choose two)

• A. virtualization
• B. middleware
• C. operating systems
• D. applications
• E. data

Answer: DE

Explanation:
Customers must manage applications and data in PaaS.

NEW QUESTION 19

Refer to the exhibit.

Which command was used to generate this output and to show which ports are authenticating with dot1x or mab?

• A. show authentication registrations
• B. show authentication method
• C. show dot1x all
• D. show authentication sessions

Answer: D

Explanation:
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/s1/sec-s1-xe-3se-3850-cr-book/sec-s1-xe-3se-3850-c Displaying the Summary of All Auth Manager Sessions on the Switch
Enter the following:
Switch# show authentication sessions
Interface MAC Address Method Domain Status Session ID
Gi1/48 0015.63b0.f676 dot1x DATA Authz Success 0A3462B1000000102983C05C Gi1/5 000f.23c4.a401 mab DATA Authz Success 0A3462B10000000D24F80B58
Gi1/5 0014.bf5d.d26d dot1x DATA Authz Success 0A3462B10000000E29811B94

NEW QUESTION 20
......