Question 1

An administrator is trying to determine which applications are being used in the network but does not want the network devices to send metadata to Cisco Firepower. Which feature should be used to accomplish this?

Options :

A : NetFlow

B : Packet Tracer

C : Network Discovery

D : Access Control

Answer: A

Question 2

What is the benefit of installing Cisco AMP for Endpoints on a network?

Options :

A : It provides operating system patches on the endpoints for security.

B : It provides flow-based visibility for the endpoints network connections.

C : It enables behavioral analysis to be used for the endpoints.

D : It protects endpoint systems through application control and real-time scanning

Answer: D

Question 3

Which type of data exfiltration technique encodes data in outbound DNS requests to specific servers and can be stopped by Cisco Umbrella?

Options :

A : DNS tunneling

B : DNS flood attack

C : cache poisoning

D : DNS hijacking

Answer: A

Question 4

What is a commonality between DMVPN and FlexVPN technologies?

Options :

A : FlexVPN and DMVPN use IS-IS routing protocol to communicate with spokes

B : FlexVPN and DMVPN use the new key management protocol

C : FlexVPN and DMVPN use the same hashing algorithms

D : IOS routers run the same NHRP code for DMVPN and FlexVPN

Answer: D

Question 5

How is data sent out to the attacker during a DNS tunneling attack?

Options :

A : as part of the UDP/53 packet payload

B : as part of the domain name

C : as part of the TCP/53 packet header

D : as part of the DNS response packet

Answer: B

Free 350-701 Mock Exam – Practice Online Confidently

Buying Options: