Cisco
350-701 Exam
Implementing and Operating Cisco Security Core Technologies Exam
Questions & Answers (Demo Version)
https://dumps2go.com/dumps/350-701/
Buy Full Product Here:
, Cisco
350-701 Exam
Cisco Implementing and Operating Cisco Security Core
Technologies (SCOR) Exam
Questions & Answers
Demo
,Questions & Answers PDF Page 2
Version: 7.0
Question: 1
Which feature requires a network discovery policy on the Cisco Firepower Next Generation Intrusion
Prevention System?
A. security intelligence
B. impact flags
C. health monitoring
D. URL filtering
Answer: A
Question: 2
Refer to the exhibit.
Which statement about the authentication protocol used in the configuration is true?
A. The authentication request contains only a password
B. The authentication request contains only a username
C. The authentication and authorization requests are grouped in a single packet.
D. There are separate authentication and authorization request packets.
Answer: C
Question: 3
Which two preventive measures are used to control cross-site scripting? (Choose two.)
A. Enable client-side scripts on a per-domain basis.
B. Incorporate contextual output encoding/escaping.
C. Disable cookie inspection in the HTML inspection engine.
D. Run untrusted HTML input through an HTML sanitization engine.
E. SameSite cookie attribute should not be used.
,Questions & Answers PDF Page 3
Answer: AB
Question: 4
Which policy is used to capture host information on the Cisco Firepower Next Generation Intrusion
Prevention
System?
A. correlation
B. intrusion
C. access control
D. network discovery
Answer: D
Question: 5
Refer to the exhibit.
Which command was used to generate this output and to show which ports are
authenticating with dot1x or mab?
A. show authentication registrations
B. show authentication method
C. show dot1x all
D. show authentication sessions
Answer: B
,Questions & Answers PDF Page 4
Question: 6
DRAG DROP
Drag and drop the Firepower Next Generation Intrustion Prevention System detectors from the left
onto the correct definitions on the right.
Answer:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-
configguide-v64/detecting_specific_threats.html
Question: 7
Which two capabilities does TAXII support? (Choose two.)
A. exchange
B. pull messaging
C. binding
D. correlation
E. mitigating
,Questions & Answers PDF Page 5
Answer: BC
Question: 8
Which policy represents a shared set of features or parameters that define the aspects of a managed
device
that are likely to be similar to other managed devices in a deployment?
A. group policy
B. access control policy
C. device management policy
D. platform service policy
Answer: D
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/622/configuration/guide/fpmc-
configguide-
v622/platform_settings_policies_for_managed_devices.pdf
Question: 9
An administrator wants to ensure that all endpoints are compliant before users are allowed access on
the
corporate network. The endpoints must have the corporate antivirus application installed and be
running the
latest build of Windows 10. What must the administrator implement to ensure that all devices are
compliant
before they are allowed on the network?
A. Cisco Identity Services Engine and AnyConnect Posture module
B. Cisco Stealthwatch and Cisco Identity Services Engine integration
C. Cisco ASA firewall with Dynamic Access Policies configured
D. Cisco Identity Services Engine with PxGrid services enabled
Answer: A
Reference:
https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect46/
administration/guide/b_AnyConnect_Administrator_Guide_4-6/configure-posture.html
Question: 10
What are two Detection and Analytics Engines of Cognitive Threat Analytics? (Choose two.)
, Questions & Answers PDF Page 6
A. data exfiltration
B. command and control communication
C. intelligent proxy
D. snort
E. URL categorization
Answer: AB
Reference:
https://www.cisco.com/c/dam/en/us/products/collateral/security/cognitive-threat-analytics/at-
aglance-
c45-736555.pdf
350-701 Exam
Implementing and Operating Cisco Security Core Technologies Exam
Questions & Answers (Demo Version)
https://dumps2go.com/dumps/350-701/
Buy Full Product Here:
, Cisco
350-701 Exam
Cisco Implementing and Operating Cisco Security Core
Technologies (SCOR) Exam
Questions & Answers
Demo
,Questions & Answers PDF Page 2
Version: 7.0
Question: 1
Which feature requires a network discovery policy on the Cisco Firepower Next Generation Intrusion
Prevention System?
A. security intelligence
B. impact flags
C. health monitoring
D. URL filtering
Answer: A
Question: 2
Refer to the exhibit.
Which statement about the authentication protocol used in the configuration is true?
A. The authentication request contains only a password
B. The authentication request contains only a username
C. The authentication and authorization requests are grouped in a single packet.
D. There are separate authentication and authorization request packets.
Answer: C
Question: 3
Which two preventive measures are used to control cross-site scripting? (Choose two.)
A. Enable client-side scripts on a per-domain basis.
B. Incorporate contextual output encoding/escaping.
C. Disable cookie inspection in the HTML inspection engine.
D. Run untrusted HTML input through an HTML sanitization engine.
E. SameSite cookie attribute should not be used.
,Questions & Answers PDF Page 3
Answer: AB
Question: 4
Which policy is used to capture host information on the Cisco Firepower Next Generation Intrusion
Prevention
System?
A. correlation
B. intrusion
C. access control
D. network discovery
Answer: D
Question: 5
Refer to the exhibit.
Which command was used to generate this output and to show which ports are
authenticating with dot1x or mab?
A. show authentication registrations
B. show authentication method
C. show dot1x all
D. show authentication sessions
Answer: B
,Questions & Answers PDF Page 4
Question: 6
DRAG DROP
Drag and drop the Firepower Next Generation Intrustion Prevention System detectors from the left
onto the correct definitions on the right.
Answer:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-
configguide-v64/detecting_specific_threats.html
Question: 7
Which two capabilities does TAXII support? (Choose two.)
A. exchange
B. pull messaging
C. binding
D. correlation
E. mitigating
,Questions & Answers PDF Page 5
Answer: BC
Question: 8
Which policy represents a shared set of features or parameters that define the aspects of a managed
device
that are likely to be similar to other managed devices in a deployment?
A. group policy
B. access control policy
C. device management policy
D. platform service policy
Answer: D
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/622/configuration/guide/fpmc-
configguide-
v622/platform_settings_policies_for_managed_devices.pdf
Question: 9
An administrator wants to ensure that all endpoints are compliant before users are allowed access on
the
corporate network. The endpoints must have the corporate antivirus application installed and be
running the
latest build of Windows 10. What must the administrator implement to ensure that all devices are
compliant
before they are allowed on the network?
A. Cisco Identity Services Engine and AnyConnect Posture module
B. Cisco Stealthwatch and Cisco Identity Services Engine integration
C. Cisco ASA firewall with Dynamic Access Policies configured
D. Cisco Identity Services Engine with PxGrid services enabled
Answer: A
Reference:
https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect46/
administration/guide/b_AnyConnect_Administrator_Guide_4-6/configure-posture.html
Question: 10
What are two Detection and Analytics Engines of Cognitive Threat Analytics? (Choose two.)
, Questions & Answers PDF Page 6
A. data exfiltration
B. command and control communication
C. intelligent proxy
D. snort
E. URL categorization
Answer: AB
Reference:
https://www.cisco.com/c/dam/en/us/products/collateral/security/cognitive-threat-analytics/at-
aglance-
c45-736555.pdf
