350-701 Free Practice Test

- (Exam Topic 3)
Which Cisco cloud security software centrally manages policies on multiple platforms such as Cisco ASA, Cisco Firepower, Cisco Meraki, and AWS?

1. A. Cisco Defense Orchestrator
2. B. Cisco Configuration Professional
3. C. Cisco Secureworks
4. D. Cisco DNAC

Correct Answer: A

- (Exam Topic 1)
Which exfiltration method does an attacker use to hide and encode data inside DNS requests and queries?

1. A. DNS tunneling
2. B. DNSCrypt
3. C. DNS security
4. D. DNSSEC

Correct Answer: A
DNS Tunneling is a method of cyber attack that encodes the data of other programs or protocols in DNSqueries and responses. DNS tunneling often includes data payloads that can be added to an attacked DNSserver and used to control a remote server and applications.

- (Exam Topic 3)
What is the most common type of data exfiltration that organizations currently experience?

1. A. HTTPS file upload site
2. B. Microsoft Windows network shares
3. C. SQL database injections
4. D. encrypted SMTP

Correct Answer: B
Reference: https://blogs.cisco.com/security/sensitive-data-exfiltration-and-the-insider

- (Exam Topic 2)
Which product allows Cisco FMC to push security intelligence observable to its sensors from other products?

1. A. Encrypted Traffic Analytics
2. B. Threat Intelligence Director
3. C. Cognitive Threat Analytics
4. D. Cisco Talos Intelligence

Correct Answer: B

- (Exam Topic 3)
Which DevSecOps implementation process gives a weekly or daily update instead of monthly or quarterly in the applications?

1. A. Orchestration
2. B. CI/CD pipeline
3. C. Container
4. D. Security

Correct Answer: B
Reference: https://devops.com/how-to-implement-an-effective-ci-cd-pipeline/