350-701 Practice Test

350-701 Practice Test practice questions, page 18 of 28, with answer review and explanations.

Question 86

How many interfaces per bridge group does an ASA bridge group deployment support?

  1. up to 16
  2. up to 2
  3. up to 4
  4. up to 8

Question 87

A network administrator configures Dynamic ARP Inspection on a switch. After Dynamic ARP Inspection is applied, all users on that switch are unable to communicate with any destination. The network administrator checks the Interface status of all interfaces, and there is no err-disabled interface. What is causing this problem?

  1. DHCP snooping has not been enabled on all VLANs
  2. Dynamic ARP inspection has not been enabled on all VLANs
  3. The ip arp inspection limit command is applied on all interfaces and is blocking the traffic of all users
  4. The no ip arp inspection trust command is applied on all user host interfaces

Question 88

What is a difference between FlexVPN and DMVPN?

  1. DMVPN uses only IKEv1. FlexVPN uses only IKEv2
  2. FlexVPN uses IKEv2. DMVPN uses IKEv1 or IKEv2
  3. DMVPN uses IKEv1 or IKEv2. FlexVPN only uses IKEv1
  4. FlexVPN uses IKEv1 or IKEv2. DMVPN uses only IKEv2

Question 89

Drag and drop the capabilities of Cisco Firepower versus Cisco AMP from the left into the appropriate category on the right. Select and Place:

Question 90

An engineer needs behavioral analysis to detect malicious activity on the hosts, and is configuring the organization's public cloud to send telemetry using the cloud provider's mechanisms to a security device. Which mechanism should the engineer configure to accomplish this goal?

  1. sFlow
  2. NetFlow
  3. mirror port
  4. VPC flow logs