350-701 Free Practice Test

- (Exam Topic 1)
Which type of attack is social engineering?

1. A. trojan
2. B. phishing
3. C. malware
4. D. MITM

Correct Answer: B
Phishing is a form of social engineering. Phishing attacks use email or malicious web sites to
solicit personal,often financial, information. Attackers may send email seemingly from a reputable credit card company orfinancial institution that requests account information, often suggesting that there is a problem.

- (Exam Topic 3)
Which ESA implementation method segregates inbound and outbound email?

1. A. one listener on a single physical Interface
2. B. pair of logical listeners on a single physical interface with two unique logical IPv4 addresses and one IPv6 address
3. C. pair of logical IPv4 listeners and a pair Of IPv6 listeners on two physically separate interfaces
4. D. one listener on one logical IPv4 address on a single logical interface

Correct Answer: D

- (Exam Topic 3)
Which two capabilities of Integration APIs are utilized with Cisco DNA center? (Choose two)

1. A. Upgrade software on switches and routers
2. B. Third party reporting
3. C. Connect to ITSM platforms
4. D. Create new SSIDs on a wireless LAN controller
5. E. Automatically deploy new virtual routers

Correct Answer: BC
Reference:
https://developer.cisco.com/docs/dna-center/#!cisco-dna-center-platform-overview/integration-api-westbound

- (Exam Topic 3)
An engineer has been tasked with configuring a Cisco FTD to analyze protocol fields and detect anomalies in the traffic from industrial systems. What must be done to meet these requirements?

1. A. Implement pre-filter policies for the CIP preprocessor
2. B. Enable traffic analysis in the Cisco FTD
3. C. Configure intrusion rules for the DNP3 preprocessor
4. D. Modify the access control policy to trust the industrial traffic

Correct Answer: C
"configure INTRUSION RULES for DNP3" -> Documentation states, that enabling INTRUSION RULES is mandatory for CIP to work + required preprocessors (in Network Access Policy - NAP) will be enabled automatically:
"If you want the CIP preprocessor rules listed in the following table to generate events, you MUST enable them. See Setting Intrusion Rule States for information on enabling rules."
"If the Modbus, DNP3, or CIP preprocessor is disabled, and you enable and deploy an intrusion rule that requires one of these preprocessors, the system automatically uses the required preprocessor, with its current settings, although the preprocessor remains disabled in the web interface for the corresponding network analysis policy."
[1]
https://www.cisco.com/c/en/us/td/docs/security/firepower/630/configuration/guide/fpmc-config-guide-v63/scada

- (Exam Topic 3)
Which security solution is used for posture assessment of the endpoints in a BYOD solution?

1. A. Cisco FTD
2. B. Cisco ASA
3. C. Cisco Umbrella
4. D. Cisco ISE

Correct Answer: D