350-701 Practice Test

350-701 Practice Test practice questions, page 14 of 28, with answer review and explanations.

Question 66

Refer to the exhibit. An engineer is implementing a certificate based VPN. What is the result of the existing configuration?

  1. Only an IKEv2 peer that has an OU certificate attribute set to MANGLER establishes an IKEv2 SA successfully.
  2. The OU of the IKEv2 peer certificate is used as the identity when matching an IKEv2 authorization policy.
  3. The OU of the IKEv2 peer certificate is set to MANGLER.
  4. The OU of the IKEv2 peer certificate is encrypted when the OU is set to MANGLER.

Question 67

Which kind of API that is used with Cisco DNA Center provisions SSIDs, QoS policies, and update software versions on switches?

  1. event
  2. intent
  3. integration
  4. multivendor

Question 68

A network engineer needs to select a VPN type that provides the most stringent security, multiple security associations for the connections, and efficient VPN establishment with the least bandwidth consumption. Why should the engineer select either FlexVPN or DMVPN for this environment?

  1. DMVPN because it uses multiple SAs and FlexVPN does not.
  2. DMVPN because it supports IKEv2 and FlexVPN does not.
  3. FlexVPN because it supports IKEv2 and DMVPN does not.
  4. FlexVPN because it uses multiple SAs and DMVPN does not.

Question 69

Refer to the exhibit. Which command was used to generate this output and to show which ports are authenticating with dot1x or mab?

  1. show authentication registrations
  2. show authentication method
  3. show dot1x all
  4. show authentication sessions

Question 70

Refer to the exhibit. What does the number 15 represent in this configuration?

  1. privilege level for an authorized user to this router
  2. access list that identifies the SNMP devices that can access the router
  3. interval in seconds between SNMPv3 authentication attempts
  4. number of possible failed attempts until the SNMPv3 user is locked out