350-701 Free Practice Test

- (Exam Topic 2)
What is a key difference between Cisco Firepower and Cisco ASA?

1. A. Cisco ASA provides access control while Cisco Firepower does not.
2. B. Cisco Firepower provides identity-based access control while Cisco ASA does not.
3. C. Cisco Firepower natively provides intrusion prevention capabilities while Cisco ASA does not.
4. D. Cisco ASA provides SSL inspection while Cisco Firepower does not.

Correct Answer: C

- (Exam Topic 1)
Which two deployment model configurations are supported for Cisco FTDv in AWS? (Choose two)

1. A. Cisco FTDv configured in routed mode and managed by an FMCv installed in AWS
2. B. Cisco FTDv with one management interface and two traffic interfaces configured
3. C. Cisco FTDv configured in routed mode and managed by a physical FMC appliance on premises
4. D. Cisco FTDv with two management interfaces and one traffic interface configured
5. E. Cisco FTDv configured in routed mode and IPv6 configured

Correct Answer: AC

- (Exam Topic 2)
A network engineer has been tasked with adding a new medical device to the network. Cisco ISE is being used as the NAC server, and the new device does not have a supplicant available. What must be done in order to securely connect this device to the network?

1. A. Use MAB with profiling
2. B. Use MAB with posture assessment.
3. C. Use 802.1X with posture assessment.
4. D. Use 802.1X with profiling.

Correct Answer: A
Reference: https://community.cisco.com/t5/security-documents/ise-profiling-design-guide/ta-p/3739456

- (Exam Topic 1)
What Cisco command shows you the status of an 802.1X connection on interface gi0/1?

1. A. show authorization status
2. B. show authen sess int gi0/1
3. C. show connection status gi0/1
4. D. show ver gi0/1

Correct Answer: B

- (Exam Topic 3)
Which two criteria must a certificate meet before the WSA uses it to decrypt application traffic? (Choose two.)

1. A. It must include the current date.
2. B. It must reside in the trusted store of the WSA.
3. C. It must reside in the trusted store of the endpoint.
4. D. It must have been signed by an internal CA.
5. E. it must contain a SAN.

Correct Answer: AB