350-701 Free Practice Test

- (Exam Topic 1)
Which command enables 802.1X globally on a Cisco switch?

1. A. dot1x system-auth-control
2. B. dot1x pae authenticator
3. C. authentication port-control aut
4. D. aaa new-model

Correct Answer: A

- (Exam Topic 2)
Which method is used to deploy certificates and configure the supplicant on mobile devices to gain access to network resources?

1. A. BYOD on boarding
2. B. Simple Certificate Enrollment Protocol
3. C. Client provisioning
4. D. MAC authentication bypass

Correct Answer: A
Reference:
https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ISE_admin_guide_24/m_ise_devices_by

- (Exam Topic 3)
An engineer must configure Cisco AMP for Endpoints so that it contains a list of files that should not be executed by users. These files must not be quarantined. Which action meets this configuration requirement?

1. A. Identity the network IPs and place them in a blocked list.
2. B. Modify the advanced custom detection list to include these files.
3. C. Create an application control blocked applications list.
4. D. Add a list for simple custom detection.

Correct Answer: C

- (Exam Topic 3)
Which type of attack is MFA an effective deterrent for?

1. A. ping of death
2. B. phishing
3. C. teardrop
4. D. syn flood

Correct Answer: B

- (Exam Topic 3)
What are two facts about WSA HTTP proxy configuration with a PAC file? (Choose two.)

1. A. It is defined as a Transparent proxy deployment.
2. B. In a dual-NIC configuration, the PAC file directs traffic through the two NICs to the proxy.
3. C. The PAC file, which references the proxy, is deployed to the client web browser.
4. D. It is defined as an Explicit proxy deployment.
5. E. It is defined as a Bridge proxy deployment.

Correct Answer: CD