350-701 Free Practice Test

- (Exam Topic 3)
What are two functions of IKEv1 but not IKEv2? (Choose two)

1. A. NAT-T is supported in IKEv1 but rot in IKEv2.
2. B. With IKEv1, when using aggressive mode, the initiator and responder identities are passed cleartext
3. C. With IKEv1, mode negotiates faster than main mode
4. D. IKEv1 uses EAP authentication
5. E. IKEv1 conversations are initiated by the IKE_SA_INIT message

Correct Answer: CE

- (Exam Topic 1)
Refer to the exhibit.

What does the number 15 represent in this configuration?

1. A. privilege level for an authorized user to this router
2. B. access list that identifies the SNMP devices that can access the router
3. C. interval in seconds between SNMPv3 authentication attempts
4. D. number of possible failed attempts until the SNMPv3 user is locked out

Correct Answer: B
The syntax of this command is shown below:snmp-server group [group-name {v1 | v2c | v3 [auth | noauth | priv]}] [read read-view] [write write-view] [notify notify-view] [access access-list]The command above restricts which IP source addresses are allowed to access SNMP functions on the router. You could restrict SNMP access by simply applying an interface ACL to block incoming SNMP packets that don’t come from trusted servers. However, this would not be as effective as using the global SNMP commands shown in this recipe. Because you can apply this method once for the whole router, it is much simpler than applying ACLs to block SNMP on all interfaces separately. Also, using interface ACLs would block not only SNMP packets intended for this router, but also may stop SNMP packets that just happened to be passing through on their way to some other destination device.

- (Exam Topic 3)
How does the Cisco WSA enforce bandwidth restrictions for web applications?

1. A. It implements a policy route to redirect application traffic to a lower-bandwidth link.
2. B. It dynamically creates a scavenger class QoS policy and applies it to each client that connects through the WSA.
3. C. It sends commands to the uplink router to apply traffic policing to the application traffic.
4. D. It simulates a slower link by introducing latency into application traffic.

Correct Answer: C

- (Exam Topic 2)
Why is it important to implement MFA inside of an organization?

1. A. To prevent man-the-middle attacks from being successful.
2. B. To prevent DoS attacks from being successful.
3. C. To prevent brute force attacks from being successful.
4. D. To prevent phishing attacks from being successful.

Correct Answer: C

- (Exam Topic 1)
When web policies are configured in Cisco Umbrella, what provides the ability to ensure that domains are blocked when they host malware, command and control, phishing, and more threats?

1. A. Application Control
2. B. Security Category Blocking
3. C. Content Category Blocking
4. D. File Analysis

Correct Answer: B