350-701 Free Practice Test

- (Exam Topic 1)
Which proxy mode must be used on Cisco WSA to redirect TCP traffic with WCCP?

1. A. transparent
2. B. redirection
3. C. forward
4. D. proxy gateway

Correct Answer: A
Reference: https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/Aug2013/CVDWebSecurityUsingCiscoWSADesign

- (Exam Topic 1)
Refer to the exhibit.

What does the number 15 represent in this configuration?

1. A. privilege level for an authorized user to this router
2. B. access list that identifies the SNMP devices that can access the router
3. C. interval in seconds between SNMPv3 authentication attempts
4. D. number of possible failed attempts until the SNMPv3 user is locked out

Correct Answer: B
The syntax of this command is shown below:snmp-server group [group-name {v1 | v2c | v3 [auth | noauth | priv]}] [read read-view] [write write-view] [notify notify-view] [access access-list]The command above restricts which IP source addresses are allowed to access SNMP functions on the router. You could restrict SNMP access by simply applying an interface ACL to block incoming SNMP packets that don’t come from trusted servers. However, this would not be as effective as using the global SNMP commands shown in this recipe. Because you can apply this method once for the whole router, it is much simpler than applying ACLs to block SNMP on all interfaces separately. Also, using interface ACLs would block not only SNMP packets intended for this router, but also may stop SNMP packets that just happened to be passing through on their way to some other destination device.

- (Exam Topic 3)
An engineer recently completed the system setup on a Cisco WSA Which URL information does the system send to SensorBase Network servers?

1. A. Summarized server-name information and MD5-hashed path information
2. B. complete URL,without obfuscating the path segments
3. C. URL information collected from clients that connect to the Cisco WSA using Cisco AnyConnect
4. D. none because SensorBase Network Participation is disabled by default

Correct Answer: B

Which two behavioral patterns characterize a ping of death attack? (Choose two.)

1. A. The attack is fragmented into groups of 16 octets before transmission.
2. B. The attack is fragmented into groups of 8 octets before transmission.
3. C. Short synchronized bursts of traffic are used to disrupt TCP connections.
4. D. Malformed packets are used to crash systems.
5. E. Publicly accessible DNS servers are typically used to execute the attack.

Correct Answer: BD
Reference: https://en.wikipedia.org/wiki/Ping_of_death

Which technology reduces data loss by identifying sensitive information stored in public computing environments?

1. A. Cisco SDA
2. B. Cisco Firepower
3. C. Cisco HyperFlex
4. D. Cisco Cloudlock

Correct Answer: D
Reference: https://www.cisco.com/c/dam/en/us/products/collateral/security/cloudlock/cisco-cloudlock-cloud-data-security-datasheet.pdf