350-701 Practice Test

350-701 Practice Test practice questions, page 16 of 28, with answer review and explanations.

Question 76

Which SNMPv3 configuration must be used to support the strongest security possible?

  1. asa-host(config)#snmp-server group myv3 v3 priv asa-host(config)#snmp-server user andy myv3 auth sha cisco priv des ciscXXXXXXXX asa-host(config)#snmp-server host inside 10.255.254.1 version 3 andy
  2. asa-host(config)#snmp-server group myv3 v3 noauth asa-host(config)#snmp-server user andy myv3 auth sha cisco priv aes 256 ciscXXXXXXXX asa-host(config)#snmp-server host inside 10.255.254.1 version 3 andy
  3. asa-host(config)#snmp-server group myv3 v3 noauth asa-host(config)#snmp-server user andy myv3 auth sha cisco priv 3des ciscXXXXXXXX asa-host(config)#snmp-server host inside 10.255.254.1 version 3 andy
  4. asa-host(config)#snmp-server group myv3 v3 priv asa-host(config)#snmp-server user andy myv3 auth sha cisco priv aes 256 ciscXXXXXXXX asa-host(config)#snmp-server host inside 10.255.254.1 version 3 andy

Question 77

Under which two circumstances is a CoA issued? (Choose two.)

  1. A new authentication rule was added to the policy on the Policy Service node.
  2. An endpoint is deleted on the Identity Service Engine server.
  3. A new Identity Source Sequence is created and referenced in the authentication policy.
  4. An endpoint is profiled for the first time.
  5. A new Identity Service Engine server is added to the deployment with the Administration persona.

Question 78

Which ASA deployment mode can provide separation of management on a shared appliance?

  1. DMZ multiple zone mode
  2. transparent firewall mode
  3. multiple context mode
  4. routed mode

Question 79

Refer to the exhibit. Which command was used to display this output?

  1. show dot1x all
  2. show dot1x
  3. show dot1x all summary
  4. show dot1x interface gi1/0/12

Question 80

What is a characteristic of Cisco ASA NetFlow v9 Secure Event Logging?

  1. It tracks flow-create, flow-teardown, and flow-denied events.
  2. It provides stateless IP flow tracking that exports all records of a specific flow.
  3. It tracks the flow continuously and provides updates every 10 seconds.
  4. Its events match all traffic classes in parallel.