350-701 Free Practice Test

- (Exam Topic 1)
Refer to the exhibit.

An engineer configured wired 802.1x on the network and is unable to get a laptop to authenticate. Which port configuration is missing?

1. A. authentication open
2. B. dotlx reauthentication
3. C. cisp enable
4. D. dot1x pae authenticator

Correct Answer: D

- (Exam Topic 3)

Refer to the exhibit. All servers are in the same VLAN/Subnet. DNS Server-1 and DNS Server-2 must communicate with each other, and all servers must communicate with default gateway multilayer switch. Which type of private VLAN ports should be configured to prevent communication between DNS servers and the file server?

1. A. Configure GigabitEthernet0/1 as community port, GigabitEthernet0/2 as isolated port, and GigabitEthernet0/3 and GigabitEthernet0/4 as promiscuous ports.
2. B. Configure GigabitEthernet0/1 as community port, GigabitEthernet0/2 as promiscuous port, Gigabit Ethernet0/3 and GigabitEthernet0/4 as isolated ports
3. C. Configure GigabitEthernet0/1 as promiscuous port, GigabitEthernet0/2 as isolated port and GigabitEthernet0/3 and GrgabitEthernet0/4 as community ports
4. D. Configure GigabitEthernet0/1 as promiscuous port, GigabitEthernet0/2 as community port, and GigabitEthernet0/3 and GrgabitEthernet0/4 as isolated ports.

Correct Answer: C

- (Exam Topic 1)
Which two fields are defined in the NetFlow flow? (Choose two)

1. A. type of service byte
2. B. class of service bits
3. C. Layer 4 protocol type
4. D. destination port
5. E. output logical interface

Correct Answer: AD
Cisco standard NetFlow version 5 defines a flow as a unidirectional sequence of packets that all share seven values which define a unique key for the flow:+ Ingress interface (SNMP ifIndex)+ Source IP address+ Destination IP address+ IP protocol+ Source port for UDP or TCP, 0 for other protocols+ Destination port for UDP or TCP, type and code for ICMP, or 0 for other protocols+ IP Type of ServiceNote: A flow is a unidirectional series of packets between a given source and destination.

- (Exam Topic 1)
Which two deployment modes does the Cisco ASA FirePower module support? (Choose two)

1. A. transparent mode
2. B. routed mode
3. C. inline mode
4. D. active mode
5. E. passive monitor-only mode

Correct Answer: CD
Reference:
https://www.cisco.com/c/en/us/td/docs/security/asa/asa92/asdm72/firewall/asa-firewall-asdm/modules-sfr.html

- (Exam Topic 1)
Which VPN technology can support a multivendor environment and secure traffic between sites?

1. A. SSL VPN
2. B. GET VPN
3. C. FlexVPN
4. D. DMVPN

Correct Answer: C
FlexVPN is an IKEv2-based VPN technology that provides several benefits beyond traditional site-to-site VPN implementations. FlexVPN is a standards-based solution that can interoperate with non-Cisco IKEv2implementations. Therefore FlexVPN can support a multivendor environment. All of the three VPN technologies support traffic between sites (site-to-site or spoke-to-spoke).