350-701試験無料問題集（630題）「Cisco Implementing and Operating Cisco Security Core Technologies 認定」

出題：1

Refer to the exhibit. All servers are in the same VLAN/Subnet. DNS Server-1 and DNS Server-2 must communicate with each other, and all servers must communicate with default gateway multilayer switch.
Which type of private VLAN ports should be configured to prevent communication between DNS servers and the file server?

A. Configure GigabitEthernet0/1 as promiscuous port, GigabitEthernet0/2 as community port, and GigabitEthernet0/3 and GrgabitEthernet0/4 as isolated ports.

B. Configure GigabitEthernet0/1 as community port, GigabitEthernet0/2 as promiscuous port, Gigabit Ethernet0/3 and GigabitEthernet0/4 as isolated ports C. Configure GigabitEthernet0/1 as promiscuous port, GigabitEthernet0/2 as isolated port and GigabitEthernet0/3 and GrgabitEthernet0/4 as community ports

C. Configure GigabitEthernet0/1 as community port, GigabitEthernet0/2 as isolated port, and GigabitEthernet0/3 and GigabitEthernet0/4 as promiscuous ports.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

Which solution stops unauthorized access to the system if a user's password is compromised?

A. SSL

B. VPN

C. MFA

D. AMP

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

Refer to the exhibit.

What does the number 15 represent in this configuration?

A. access list that identifies the SNMP devices that can access the router

B. interval in seconds between SNMPv3 authentication attempts

C. privilege level for an authorized user to this router

D. number of possible failed attempts until the SNMPv3 user is locked out

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

Refer to the exhibit.

Which type of authentication is in use?

A. SMTP relay server authentication

B. POP3 authentication

C. external user and relay mail authentication

D. LDAP authentication for Microsoft Outlook

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

A network engineer is deciding whether to use stateful or stateless failover when configuring two ASAs for high availability. What is the connection status in both cases?

A. preserved with both stateful and stateless failover

B. need to be reestablished with stateful failover and preserved with stateless failover

C. preserved with stateful failover and need to be reestablished with stateless failover

D. need to be reestablished with both stateful and stateless failover

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

What is a difference between GETVPN and IPsec?

A. GETVPN is based on IKEv2 and does not support IKEv1

B. GETVPN is used to build a VPN network with multiple sites without having to statically configure all devices

C. GETVPN provides key management and security association management

D. GETVPN reduces latency and provides encryption over MPLS without the use of a central hub

正解：A 解答を投票する

出題：7

Which type of algorithm provides the highest level of protection against brute-force attacks?

A. HMAC

B. MD5

C. SHA

D. PFS

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

An organization has noticed an increase in malicious content downloads and wants to use Cisco Umbrella to prevent this activity for suspicious domains while allowing normal web traffic. Which action will accomplish this task?

A. Use destination block lists.

B. Set content settings to High

C. Configure application block lists.

D. Configure the intelligent proxy.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

Which type of API is being used when a controller within a software-defined network architecture dynamically makes configuration changes on switches within the network?

A. northbound API

B. westbound AP

C. eastbound API

D. southbound API

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：10

What is a difference between FlexVPN and DMVPN?

A. DMVPN uses only IKEv1 FlexVPN uses only IKEv2

B. FlexVPN uses IKEv1 or IKEv2, DMVPN uses only IKEv2

C. FlexVPN uses IKEv2, DMVPN uses IKEv1 or IKEv2

D. DMVPN uses IKEv1 or IKEv2, FlexVPN only uses IKEv1

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：11

Refer to the exhibit.

When configuring a remote access VPN solution terminating on the Cisco ASA, an administrator would like to utilize an external token authentication mechanism in conjunction with AAA authentication using machine certificates. Which configuration item must be modified to allow this?

A. SAML Server

B. Method

C. DHCP Servers

D. Group Policy

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：12

Which cloud service model offers an environment for cloud consumers to develop and deploy applications without needing to manage or maintain the underlying cloud infrastructure?

A. PaaS

B. IaaS

C. XaaS

D. SaaS

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：13

What do tools like Jenkins, Octopus Deploy, and Azure DevOps provide in terms of application and infrastructure automation?

A. cloud application security broker

B. container orchestration

C. compile-time instrumentation

D. continuous integration and continuous deployment

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：14

An administrator is configuring N I P on Cisco ASA via ASDM and needs to ensure that rogue NTP servers cannot insert themselves as the authoritative time source Which two steps must be taken to accomplish this task? (Choose two)

A. Set the NTP DNS hostname

B. Configure the NTP stratum

C. Specify the NTP version

D. Set the authentication key

E. Choose the interface for syncing to the NTP server

正解：D,E 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：15

Which technology limits communication between nodes on the same network segment to individual applications?

A. SaaS deployment

B. machine-to-machine firewalling

C. serverless infrastructure

D. microsegmentation

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：16

A large organization wants to deploy a security appliance in the public cloud to form a site-to-site VPN and link the public cloud environment to the private cloud in the headquarters data center. Which Cisco security appliance meets these requirements?

A. Cisco Cloud Orchestrator

B. Cisco WSAV

C. Cisco ASAV

D. Cisco Stealthwatch Cloud

正解：C 解答を投票する

出題：17

How is Cisco Umbrella configured to log only security events?

A. in the Reporting settings

B. per policy

C. in the Security Settings section

D. per network in the Deployments section

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

350-701試験無料問題集「Cisco Implementing and Operating Cisco Security Core Technologies 認定」