350-701 Free Practice Test

- (Exam Topic 2)
In which type of attack does the attacker insert their machine between two hosts that are communicating with each other?

1. A. LDAP injection
2. B. man-in-the-middle
3. C. cross-site scripting
4. D. insecure API

Correct Answer: B

- (Exam Topic 2)
What is a benefit of conducting device compliance checks?

1. A. It indicates what type of operating system is connecting to the network.
2. B. It validates if anti-virus software is installed.
3. C. It scans endpoints to determine if malicious activity is taking place.
4. D. It detects email phishing attacks.

Correct Answer: B

- (Exam Topic 1)
What is a required prerequisite to enable malware file scanning for the Secure Internet Gateway?

1. A. Enable IP Layer enforcement.
2. B. Activate the Advanced Malware Protection license
3. C. Activate SSL decryption.
4. D. Enable Intelligent Proxy.

Correct Answer: D

- (Exam Topic 2)
An organization recently installed a Cisco WSA and would like to take advantage of the AVC engine to allow the organization to create a policy to control application specific activity. After enabling the AVC engine, what must be done to implement this?

1. A. Use security services to configure the traffic monitor, .
2. B. Use URL categorization to prevent the application traffic.
3. C. Use an access policy group to configure application control settings.
4. D. Use web security reporting to validate engine functionality

Correct Answer: C
The Application Visibility and Control (AVC) engine lets you create policies to control application activity on the network without having to fully understand the underlying technology of each application. You can configure application control settings in Access Policy groups. You can block or allow applications individually or according to application type. You can also apply controls to particular application types.

- (Exam Topic 3)
An organization wants to provide visibility and to identify active threats in its network using a VM. The organization wants to extract metadata from network packet flow while ensuring that payloads are not retained or transferred outside the network. Which solution meets these requirements?

1. A. Cisco Umbrella Cloud
2. B. Cisco Stealthwatch Cloud PNM
3. C. Cisco Stealthwatch Cloud PCM
4. D. Cisco Umbrella On-Premises

Correct Answer: B
Reference:
https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2019/pdf/5eU6DfQV/LTRSEC-2240-LG2.pdf