350-701 Free Practice Test

- (Exam Topic 1)
An administrator wants to ensure that all endpoints are compliant before users are allowed access on the corporate network. The endpoints must have the corporate antivirus application installed and be running the latest build of Windows 10.
What must the administrator implement to ensure that all devices are compliant before they are allowed on the network?

1. A. Cisco Identity Services Engine and AnyConnect Posture module
2. B. Cisco Stealthwatch and Cisco Identity Services Engine integration
3. C. Cisco ASA firewall with Dynamic Access Policies configured
4. D. Cisco Identity Services Engine with PxGrid services enabled

Correct Answer: A

- (Exam Topic 3)
Which threat intelligence standard contains malware hashes?

1. A. advanced persistent threat
2. B. open command and control
3. C. structured threat information expression
4. D. trusted automated exchange of indicator information

Correct Answer: C

- (Exam Topic 3)
What is a description of microsegmentation?

1. A. Environments apply a zero-trust model and specify how applications on different servers or containers can communicate
2. B. Environments deploy a container orchestration platform, such as Kubernetes, to manage the application delivery
3. C. Environments implement private VLAN segmentation to group servers with similar applications.
4. D. Environments deploy centrally managed host-based firewall rules on each server or container

Correct Answer: A

- (Exam Topic 3)
An engineer is configuring Cisco WSA and needs to deploy it in transparent mode. Which configuration component must be used to accomplish this goal?

1. A. MDA on the router
2. B. PBR on Cisco WSA
3. C. WCCP on switch
4. D. DNS resolution on Cisco WSA

Correct Answer: C

- (Exam Topic 1)
Which API is used for Content Security?

1. A. NX-OS API
2. B. IOS XR API
3. C. OpenVuln API
4. D. AsyncOS API

Correct Answer: D