350-701 Free Practice Test

- (Exam Topic 3)
Which capability is provided by application visibility and control?

1. A. reputation filtering
2. B. data obfuscation
3. C. data encryption
4. D. deep packet inspection

Correct Answer: D

- (Exam Topic 3)
What is a characteristic of an EDR solution and not of an EPP solution?

1. A. stops all ransomware attacks
2. B. retrospective analysis
3. C. decrypts SSL traffic for better visibility
4. D. performs signature-based detection

Correct Answer: B

- (Exam Topic 3)
Which two protocols must be configured to authenticate end users to the Web Security Appliance? (Choose two.)

1. A. NTLMSSP
2. B. Kerberos
3. C. CHAP
4. D. TACACS+
5. E. RADIUS

Correct Answer: AB

- (Exam Topic 1)
How is ICMP used an exfiltration technique?

1. A. by flooding the destination host with unreachable packets
2. B. by sending large numbers of ICMP packets with a targeted hosts source IP address using an IP broadcast address
3. C. by encrypting the payload in an ICMP packet to carry out command and control tasks on a compromised host
4. D. by overwhelming a targeted host with ICMP echo-request packets

Correct Answer: C

- (Exam Topic 3)
An engineer adds a custom detection policy to a Cisco AMP deployment and encounters issues with the configuration. The simple detection mechanism is configured, but the dashboard indicates that the hash is not 64 characters and is non-zero. What is the issue?

1. A. The engineer is attempting to upload a hash created using MD5 instead of SHA-256
2. B. The file being uploaded is incompatible with simple detections and must use advanced detections
3. C. The hash being uploaded is part of a set in an incorrect format
4. D. The engineer is attempting to upload a file instead of a hash

Correct Answer: A