350-701 Free Practice Test

- (Exam Topic 3)
Using Cisco Cognitive Threat Analytics, which platform automatically blocks risky sites, and test unknown sites for hidden advanced threats before allowing users to click them?

1. A. Cisco Identity Services Engine (ISE)
2. B. Cisco Enterprise Security Appliance (ESA)
3. C. Cisco Web Security Appliance (WSA)
4. D. Cisco Advanced Stealthwatch Appliance (ASA)

Correct Answer: C

- (Exam Topic 3)
What is an advantage of network telemetry over SNMP pulls?

1. A. accuracy
2. B. encapsulation
3. C. security
4. D. scalability

Correct Answer: D

- (Exam Topic 3)
Which posture assessment requirement provides options to the client for remediation and requires the remediation within a certain timeframe?

1. A. Audit
2. B. Mandatory
3. C. Optional
4. D. Visibility

Correct Answer: B
https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ISE_admin_guide_24/m_client_posture_ Mandatory Requirements During policy evaluation, the agent provides remediation options to clients who fail to meet the mandatory requirements defined in the posture policy. End users must remediate to meet the requirements within the time specified in the remediation timer settings

- (Exam Topic 3)
What is the recommendation in a zero-trust model before granting access to corporate applications and resources?

1. A. to use multifactor authentication
2. B. to use strong passwords
3. C. to use a wired network, not wireless
4. D. to disconnect from the network when inactive

Correct Answer: A

- (Exam Topic 2)
How does Cisco Advanced Phishing Protection protect users?

1. A. It validates the sender by using DKIM.
2. B. It determines which identities are perceived by the sender
3. C. It utilizes sensors that send messages securely.
4. D. It uses machine learning and real-time behavior analytics.

Correct Answer: D
Reference: https://docs.ces.cisco.com/docs/advanced-phishing-protection