Free Access Cisco.350-701.v2022-07-08.q453 Practice Test (Page 11)

Question 46

What does Cisco AMP for Endpoints use to help an organization detect different families of malware?

A.Ethos Engine to perform fuzzy fingerprinting

B.Tetra Engine to detect malware when me endpoint is connected to the cloud

C.Clam AV Engine to perform email scanning

D.Spero Engine with machine learning to perform dynamic analysis

Question 47

How does DNS Tunneling exfiltrate data?

A.An attacker registers a domain that a client connects to based on DNS records and sends malware through that connection.

B.An attacker opens a reverse DNS shell to get into the client's system and install malware on it.

C.An attacker uses a non-standard DNS port to gain access to the organization's DNS servers in order to poison the resolutions.

D.An attacker sends an email to the target with hidden DNS resolvers in it to redirect them to a malicious domain.

Question 48

An organization received a large amount of SPAM messages over a short time period. In order to take action on the messages, it must be determined how harmful the messages are and this needs to happen dynamically. What must be configured to accomplish this?

A.Configure the Cisco WSA to modify policies based on the traffic seen.

B.Configure the Cisco ESA to receive real-time updates from Talos

C.Configure the Cisco WSA to receive real-time updates from Talos.

D.Configure the Cisco ESA to modify policies based on the traffic seen.

Question 49

Refer to the exhibit.

Refer to the exhibit. A Cisco ISE administrator adds a new switch to an 802.1X deployment and has difficulty with some endpoints gaining access.
Most PCs and IP phones can connect and authenticate using their machine certificate credentials. However printer and video cameras cannot base d on the interface configuration provided, what must be to get these devices on to the network using Cisco ISE for authentication and authorization while maintaining security controls?

A.Add mab to the interface configuration.

B.Enable insecure protocols within Cisco ISE in the allowed protocols configuration.

C.Change the default policy in Cisco ISE to allow all devices not using machine authentication .

D.Configure authentication event fail retry 2 action authorize vlan 41 on the interface

Question 50

An engineer wants to generate NetFlow records on traffic traversing the Cisco ASA.
Which Cisco ASA
command must be used?

A.flow-export destination inside 1.1.1.1 2055

B.ip flow monitor input

C.ip flow-export destination 1.1.1.1 2055

D.flow exporter

Correct Answer: A

The syntax of this command is: flow-export destination interface-name ipv4-address | hostname udp-port This command is used on Cisco ASA to configure Network Secure Event Logging (NSEL) collector to which NetFlow packets are sent. The destination keyword indicates that a NSEL collector is being configured. + The interface-name argument is the name of the ASA and ASA Services Module interface through which the collector is reached. + The ipv4-address argument is the IP address of the machine running the collector application. + The hostname argument is the destination IP address or name of the collector. + The udp-port argument is the UDP port number to which NetFlow packets are sent. You can configure a maximum of five collectors. After a collector is configured, template records are automatically sent to all configured NSEL collectors. Reference: https://www.cisco.com/c/en/us/td/docs/security/asa/asa84/configuration/guide/asa_84_cli_config/ monitor_nsel.html
The syntax of this command is: flow-export destination interface-name ipv4-address | hostname udp-port This command is used on Cisco ASA to configure Network Secure Event Logging (NSEL) collector to which NetFlow packets are sent. The destination keyword indicates that a NSEL collector is being configured.
+ The interface-name argument is the name of the ASA and ASA Services Module interface through which the collector is reached.
+ The ipv4-address argument is the IP address of the machine running the collector application.
+ The hostname argument is the destination IP address or name of the collector.
+ The udp-port argument is the UDP port number to which NetFlow packets are sent.
You can configure a maximum of five collectors. After a collector is configured, template records are automatically sent to all configured NSEL collectors.
Reference:
Explanation The syntax of this command is: flow-export destination interface-name ipv4-address | hostname udp-port This command is used on Cisco ASA to configure Network Secure Event Logging (NSEL) collector to which NetFlow packets are sent. The destination keyword indicates that a NSEL collector is being configured. + The interface-name argument is the name of the ASA and ASA Services Module interface through which the collector is reached. + The ipv4-address argument is the IP address of the machine running the collector application. + The hostname argument is the destination IP address or name of the collector. + The udp-port argument is the UDP port number to which NetFlow packets are sent. You can configure a maximum of five collectors. After a collector is configured, template records are automatically sent to all configured NSEL collectors. Reference: https://www.cisco.com/c/en/us/td/docs/security/asa/asa84/configuration/guide/asa_84_cli_config/ monitor_nsel.html

Other Version: 1455Cisco.350-701.v2025-10-04.q562; 1076Cisco.350-701.v2025-06-19.q238; 1555Cisco.350-701.v2024-12-18.q472; 2720Cisco.350-701.v2023-08-01.q405; 3396Cisco.350-701.v2023-05-04.q372; 2321Cisco.350-701.v2023-03-16.q218; 7293Cisco.350-701.v2022-10-19.q571; 4200Cisco.350-701.v2022-02-02.q204; 116Cisco.Prepawaypdf.350-701.v2021-12-15.by.ellen.316q.pdf

Latest Upload: 126USGBC.LEED-AP-Homes.v2026-01-02.q36; 115SAP.C-THR94-2505.v2026-01-02.q29; 135MedicalProfessional.CHFM.v2026-01-01.q37; 116SAP.C-BCSPM-2502.v2026-01-01.q9; 118Microsoft.MB-335.v2026-01-01.q142; 120SAP.C_THR70_2505.v2026-01-01.q55; 156Salesforce.Financial-Services-Cloud.v2026-01-01.q121; 183Fortinet.FCSS_SDW_AR-7.4.v2025-12-31.q73; 162UiPath.UiPath-SAIAv1.v2025-12-30.q89; 213HP.HPE0-V25.v2025-12-29.q138

Question 46

Question 47

Question 48

Question 49

Question 50

Download PDF File