350-701 Free Practice Test

- (Exam Topic 2)
An organization is receiving SPAM emails from a known malicious domain. What must be configured in order to prevent the session during the initial TCP communication?

1. A. Configure the Cisco ESA to drop the malicious emails
2. B. Configure policies to quarantine malicious emails
3. C. Configure policies to stop and reject communication
4. D. Configure the Cisco ESA to reset the TCP connection

Correct Answer: D

- (Exam Topic 1)
Elliptic curve cryptography is a stronger more efficient cryptography method meant to replace which current encryption technology?

1. A. 3DES
2. B. RSA
3. C. DES
4. D. AES

Correct Answer: B

Compared to RSA, the prevalent public-key cryptography of the Internet today, Elliptic Curve Cryptography (ECC) offers smaller key sizes, faster computation,as well as memory, energy and bandwidth savings and is thus better suited forsmall devices.

- (Exam Topic 2)
Which type of protection encrypts RSA keys when they are exported and imported?

1. A. file
2. B. passphrase
3. C. NGE
4. D. nonexportable

Correct Answer: B

- (Exam Topic 1)
A network engineer is configuring DMVPN and entered the crypto isakmp key cisc0380739941 address 1.1.1.1 command on hostA. The tunnel is not being established to hostB. What action is needed to authenticate the VPN?

1. A. Change isakmp to ikev2 in the command on hostA.
2. B. Enter the command with a different password on hostB.
3. C. Enter the same command on hostB.
4. D. Change the password on hostA to the default password.

Correct Answer: C

- (Exam Topic 3)
How does a cloud access security broker function?

1. A. It is an authentication broker to enable single sign-on and multi-factor authentication for a cloud solution
2. B. lt integrates with other cloud solutions via APIs and monitors and creates incidents based on events from the cloud solution
3. C. It acts as a security information and event management solution and receives syslog from other cloud solutions.
4. D. It scans other cloud solutions being used within the network and identifies vulnerabilities

Correct Answer: B