350-701 Free Practice Test

- (Exam Topic 2)
What is the Cisco API-based broker that helps reduce compromises, application risks, and data breaches in an environment that is not on-premise?

1. A. Cisco Cloudlock
2. B. Cisco Umbrella
3. C. Cisco AMP
4. D. Cisco App Dynamics

Correct Answer: A
Cisco Cloudlock is a cloud-native cloud access security broker (CASB) that helps you move to the cloud safely.It protects your cloud users, data, and apps. Cisco Cloudlock provides visibility and compliance checks,protects data against misuse and exfiltration, and provides threat protections against malware like ransomware.

- (Exam Topic 2)
An organization recently installed a Cisco WSA and would like to take advantage of the AVC engine to allow the organization to create a policy to control application specific activity. After enabling the AVC engine, what must be done to implement this?

1. A. Use security services to configure the traffic monitor, .
2. B. Use URL categorization to prevent the application traffic.
3. C. Use an access policy group to configure application control settings.
4. D. Use web security reporting to validate engine functionality

Correct Answer: C
The Application Visibility and Control (AVC) engine lets you create policies to control application activity on the network without having to fully understand the underlying technology of each application. You can configure application control settings in Access Policy groups. You can block or allow applications individually or according to application type. You can also apply controls to particular application types.

- (Exam Topic 3)
What is a difference between GETVPN and IPsec?

1. A. GETVPN reduces latency and provides encryption over MPLS without the use of a central hub
2. B. GETVPN provides key management and security association management
3. C. GETVPN is based on IKEv2 and does not support IKEv1
4. D. GETVPN is used to build a VPN network with multiple sites without having to statically configure all devices

Correct Answer: C

- (Exam Topic 3)
Drag and drop the cryptographic algorithms for IPsec from the left onto the cryptographic processes on the right.

Solution:
Diagram Description automatically generated

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 3)
Which security product enables administrators to deploy Kubernetes clusters in air-gapped sites without needing Internet access?

1. A. Cisco Content Platform
2. B. Cisco Container Controller
3. C. Cisco Container Platform
4. D. Cisco Cloud Platform

Correct Answer: C