350-701 Free Practice Test

- (Exam Topic 3)
Which MDM configuration provides scalability?

1. A. pushing WPA2-Enterprise settings automatically to devices
2. B. enabling use of device features such as camera use
3. C. BYOD support without extra appliance or licenses
4. D. automatic device classification with level 7 fingerprinting

Correct Answer: C

- (Exam Topic 3)
An engineer is configuring device-hardening on a router in order to prevent credentials from being seen if the router configuration was compromised. Which command should be used?

1. A. service password-encryption
2. B. username privilege 15 password
3. C. service password-recovery
4. D. username < username> password

Correct Answer: A

- (Exam Topic 1)
What is a characteristic of a bridge group in ASA Firewall transparent mode?

1. A. It includes multiple interfaces and access rules between interfaces are customizable
2. B. It is a Layer 3 segment and includes one port and customizable access rules
3. C. It allows ARP traffic with a single access rule
4. D. It has an IP address on its BVI interface and is used for management traffic

Correct Answer: A
Reference:
https://www.cisco.com/c/en/us/td/docs/security/asa/asa95/configuration/general/asa-95-generalconfig/intro-fw.h BVI interface is not used for management purpose. But we can add a separate Management slot/port interface that is not part of any bridge group, and that allows only management traffic to the ASA.

- (Exam Topic 2)
Drag and drop the descriptions from the left onto the encryption algorithms on the right.

Solution:
Symmetric encryption uses a single key that needs to be shared among the people who need to receive the message while asymmetric encryption uses a pair of public key and a private key to encrypt and decrypt messages when communicating.Asymmetric encryption takes relatively more time than the symmetric encryption.Diffie Hellman algorithm is an asymmetric algorithm used to establish a shared secret for a symmetric keyalgorithm. Nowadays most of the people uses hybrid crypto system i.e, combination of symmetric andasymmetric encryption. Asymmetric Encryption is used as a technique in key exchange mechanism to share secret key and after the key is shared between sender and receiver, the communication will take place using symmetric encryption. The shared secret key will be used to encrypt the communication.Triple DES (3DES), a symmetric-key algorithm for the encryption of electronic data, is the successor of DES (Data Encryption Standard) and provides more secure encryption then DES.Note: Although “requires secret keys” option in this question is a bit unclear but it can only be assigned toSymmetric algorithm.

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 3)
An organization deploys multiple Cisco FTD appliances and wants to manage them using one centralized solution. The organization does not have a local VM but does have existing Cisco ASAs that must migrate
over to Cisco FTDs. Which solution meets the needs of the organization?

1. A. Cisco FMC
2. B. CSM
3. C. Cisco FDM
4. D. CDO

Correct Answer: B