350-701 Practice Test

350-701 Practice Test practice questions, page 17 of 28, with answer review and explanations.

Question 81

A network engineer has entered the snmp-server user andy myv3 auth sha cisco priv aes 256 cisc0383320506 command and needs to send SNMP information to a host at 10.255.254.1. Which command achieves this goal?

  1. snmp-server host inside 10.255.254.1 snmpv3 andy
  2. snmp-server host inside 10.255.254.1 version 3 myv3
  3. snmp-server host inside 10.255.254.1 snmpv3 myv3
  4. snmp-server host inside 10.255.254.1 version 3 andy

Question 82

An engineer wants to generate NetFlow records on traffic traversing the Cisco ASA. Which Cisco ASA command must be used?

  1. flow exporter <name>
  2. ip flow-export destination 1.1.1.1 2055
  3. flow-export destination inside 1.1.1.1 2055
  4. ip flow monitor <name> input

Question 83

Which two tasks allow NetFlow on a Cisco ASA 5500 Series firewall? (Choose two.)

  1. Define a NetFlow collector by using the flow-export command
  2. Create a class map to match interesting traffic
  3. Create an ACL to allow UDP traffic on port 9996
  4. Enable NetFlow Version 9
  5. Apply NetFlow Exporter to the outside interface in the inbound direction

Question 84

Refer to the exhibit. A network administrator configures command authorization for the admin5 user. What is the admin5 user able to do on HQ_Router after this configuration?

  1. set the IP address of an interface
  2. add subinterfaces
  3. complete no configurations
  4. complete all configurations

Question 85

A network engineer is configuring DMVPN and entered the crypto isakmp key cisc0383320506 address 0.0.0.0 command on host A. The tunnel is not being established to host B. What action is needed to authenticate the VPN?

  1. Change the password on host A to the default password
  2. Enter the command with a different password on host B
  3. Enter the same command on host B
  4. Change isakmp to ikev2 in the command on host A