350-701 Free Practice Test

- (Exam Topic 1)
Which license is required for Cisco Security Intelligence to work on the Cisco Next Generation Intrusion Prevention System?

1. A. control
2. B. malware
3. C. URL filtering
4. D. protect

Correct Answer: D

- (Exam Topic 1)
Which statement about IOS zone-based firewalls is true?

1. A. An unassigned interface can communicate with assigned interfaces
2. B. Only one interface can be assigned to a zone.
3. C. An interface can be assigned to multiple zones.
4. D. An interface can be assigned only to one zone.

Correct Answer: D

- (Exam Topic 3)
When a transparent authentication fails on the Web Security Appliance, which type of access does the end user get?

1. A. guest
2. B. limited Internet
3. C. blocked
4. D. full Internet

Correct Answer: C

- (Exam Topic 3)
An engineer is adding a Cisco DUO solution to the current TACACS+ deployment using Cisco ISE. The engineer wants to authenticate users using their account when they log into network devices. Which action accomplishes this task?

1. A. Configure Cisco DUO with the external Active Directory connector and tie it to the policy set within Cisco ISE.
2. B. Install and configure the Cisco DUO Authentication Proxy and configure the identity source sequence within Cisco ISE
3. C. Create an identity policy within Cisco ISE to send all authentication requests to Cisco DUO.
4. D. Modify the current policy with the condition MFASourceSequence DUO=true in the authorization conditions within Cisco ISE

Correct Answer: B

- (Exam Topic 1)
Refer to the exhibit.

Which command was used to display this output?

1. A. show dot1x all
2. B. show dot1x
3. C. show dot1x all summary
4. D. show dot1x interface gi1/0/12

Correct Answer: A