350-701 Practice Test

350-701 Practice Test practice questions, page 22 of 28, with answer review and explanations.

Question 106

An organization is trying to improve their Defense in Depth by blocking malicious destinations prior to a connection being established. The solution must be able to block certain applications from being used within the network. Which product should be used to accomplish this goal?

  1. Cisco Firepower
  2. Cisco Umbrella
  3. Cisco ISE
  4. Cisco AMP

Question 107

An engineer notices traffic interruptions on the network. Upon further investigation, it is learned that broadcast packets have been flooding the network. What must be configured, based on a predefined threshold, to address this issue?

  1. Storm Control
  2. embedded event monitoring
  3. access control lists
  4. Bridge Protocol Data Unit guard

Question 108

What is a feature of Cisco NetFlow Secure Event Logging for Cisco ASAs?

  1. Multiple NetFlow collectors are supported.
  2. Advanced NetFlow v9 templates and legacy v5 formatting are supported.
  3. Secure NetFlow connectors are optimized for Cisco Prime Infrastructure
  4. Flow-create events are delayed.

Question 109

What is a key difference between Cisco Firepower and Cisco ASA?

  1. Cisco Firepower provides identity based access control while Cisco ASA does not.
  2. Cisco AS provides access control while Cisco Firepower does not.
  3. Cisco ASA provides SSL inspection while Cisco Firepower does not.
  4. Cisco Firepower natively provides intrusion prevention capabilities while Cisco ASA does not.

Question 110

Drag and drop the suspicious patterns for the Cisco Tetration platform from the left onto the correct definitions on the right. Select and Place: