Free Access Cisco.350-201.v2022-03-01.q65 Practice Test (Page 12)

Question 51

Refer to the exhibit. What results from this script?

A.Seeds for existing domains are checked

B.A search is conducted for additional seeds

C.A list of domains as seeds is blocked

D.Domains are compared to seed rules

Question 52

Refer to the exhibit.

An engineer is performing static analysis of a file received and reported by a user. Which risk is indicated in this STIX?

A.The file is redirecting users to a website that requests privilege escalations from the user.

B.The file is redirecting users to the website that is downloading ransomware to encrypt files.

C.The file is redirecting users to a website that harvests cookies and stored account information.

D.The file is redirecting users to a website that is determining users' geographic location.

Question 53

Refer to the exhibit.

Which command was executed in PowerShell to generate this log?

A.Get-WinEvent -ListLog* -ComputerName localhost

B.Get-EventLog -List

C.Get-EventLog -LogName*

D.Get-WinEvent -ListLog*

Question 54

An engineer notices that every Sunday night, there is a two-hour period with a large load of network activity. Upon further investigation, the engineer finds that the activity is from locations around the globe outside the organization's service are a. What are the next steps the engineer must take?

A.Review the SIEM and FirePower logs, block all traffic, and document the results of calling the call center.

B.Treat it as a false positive, and accept the SIEM issue as valid to avoid alerts from triggering on weekends.

C.Define the access points using StealthWatch or SIEM logs, understand services being offered during the hours in Question:, and cross-correlate other source events.

D.Assign the issue to the incident handling provider because no suspicious activity has been observed during business hours.

Question 55

An organization is using a PKI management server and a SOAR platform to manage the certificate lifecycle. The SOAR platform queries a certificate management tool to check all endpoints for SSL certificates that have either expired or are nearing expiration. Engineers are struggling to manage problematic certificates outside of PKI management since deploying certificates and tracking them requires searching server owners manually. Which action will improve workflow automation?

A.Integrate a PKI solution within SOAR to create certificates within the SOAR engines to track, update, and monitor problematic certificates.

B.Implement a new workflow within SOAR to create tickets in the incident response system, assign problematic certificate update requests to server owners, and register change requests.

C.Implement a new workflow for SOAR to fetch a report of assets that are outside of the PKI zone, sort assets by certification management leads and automate alerts that updates are needed.

D.Integrate a SOAR solution with Active Directory to pull server owner details from the AD and send an automated email for problematic certificates requesting updates.

Other Version: 490Cisco.350-201.v2024-10-08.q108; 1024Cisco.350-201.v2023-04-04.q66; 1310Cisco.350-201.v2022-11-05.q67; 1623Cisco.350-201.v2022-08-24.q70; 56Cisco.Prepawaypdf.350-201.v2021-12-18.by.heather.67q.pdf

Latest Upload: 105OCEG.GRCP.v2025-09-11.q211; 104HP.HPE0-V27.v2025-09-11.q78; 118Oracle.1Z0-1057-23.v2025-09-10.q47; 151Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 165TheSecOpsGroup.CNSP.v2025-09-08.q20; 223CFAInstitute.ESG-Investing.v2025-09-08.q173; 173PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 151Salesforce.Data-Architect.v2025-09-05.q216; 147Adobe.AD0-E605.v2025-09-05.q50

Question 51

Question 52

Question 53

Question 54

Question 55

Download PDF File