350-701 Free Practice Test

- (Exam Topic 2)
What is the function of SDN southbound API protocols?

1. A. to allow for the dynamic configuration of control plane applications
2. B. to enable the controller to make changes
3. C. to enable the controller to use REST
4. D. to allow for the static configuration of control plane applications

Correct Answer: B
Reference: https://www.ciscopress.com/articles/article.asp?p=3004581&seqNum=2
Note: Southbound APIs helps us communicate with data plane (not control plane) applications

- (Exam Topic 2)
In which two ways does Easy Connect help control network access when used with Cisco TrustSec? (Choose two)

1. A. It allows multiple security products to share information and work together to enhance security posture in the network.
2. B. It creates a dashboard in Cisco ISE that provides full visibility of all connected endpoints.
3. C. It allows for the assignment of Security Group Tags and does not require 802.1x to be configured on the switch or the endpoint.
4. D. It integrates with third-party products to provide better visibility throughout the network.
5. E. It allows for managed endpoints that authenticate to AD to be mapped to Security Groups (PassiveID).

Correct Answer: CE
Reference:
https://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise-networks/trustsec/trustsec-witheasy-connect-c

- (Exam Topic 2)
Why is it important to have logical security controls on endpoints even though the users are trained to spot security threats and the network devices already help prevent them?

1. A. to prevent theft of the endpoints
2. B. because defense-in-depth stops at the network
3. C. to expose the endpoint to more threats
4. D. because human error or insider threats will still exist

Correct Answer: D

- (Exam Topic 3)
Which two actions does the Cisco identity Services Engine posture module provide that ensures endpoint security?(Choose two.)

1. A. The latest antivirus updates are applied before access is allowed.
2. B. Assignments to endpoint groups are made dynamically, based on endpoint attributes.
3. C. Patch management remediation is performed.
4. D. A centralized management solution is deployed.
5. E. Endpoint supplicant configuration is deployed.

Correct Answer: AD

- (Exam Topic 1)
What is the primary benefit of deploying an ESA in hybrid mode?

1. A. You can fine-tune its settings to provide the optimum balance between security and performance for your environment
2. B. It provides the lowest total cost of ownership by reducing the need for physical appliances
3. C. It provides maximum protection and control of outbound messages
4. D. It provides email security while supporting the transition to the cloud

Correct Answer: D
Cisco Hybrid Email Security is a unique service offering that facilitates the deployment of your email securityinfrastructure both on premises and in the cloud. You can change the number of on-premises versus cloudusers at any time throughout the term of your contract, assuming the total number of users does not change.This allows for deployment flexibility as your organization’s needs change.