350-701 Practice Test

Question 121

When configuring ISAKMP for IKEv1 Phase 1 on a Cisco IOS router, an administrator needs to input the command crypto isakmp key cisco address 0.0.0.0. The administrator is not sure what the IP address in this command is used for. What would be the effect of changing the IP address from 0.0.0.0 to 1.2.3.4?

1. The key server that is managing the keys for the connection will be at 1.2.3.4.
2. The address that will be used as the crypto validation authority.
3. All IP addresses other than 1.2.3.4 will be allowed.
4. The remote connection will only be allowed from 1.2.3.4.

Question 122

A network administrator is configuring SNMPv3 on a new router. The users have already been created, however an additional configuration is needed to facilitate access to the SNMP views. What must the administrator do to accomplish this?

1. define the encryption algorithm to be used by SNMPv3
2. set the password to be used for SNMPv3 authentication
3. map SNMPv3 users to SNMP views
4. specify the UDP port used by SNMP

Question 123

Drag and drop the NetFlow export formats from the left onto the descriptions on the right. Select and Place:

Question 124

Refer to the exhibit. When configuring a remote access VPN solution terminating on the Cisco ASA, an administrator would like to utilize an external token authentication mechanism in conjunction with AAA authentication using machine certificates. Which configuration item must be modified to allow this?

1. Method
2. SAML Server
3. AAA Server Group
4. Group Policy

Question 125

An administrator is trying to determine which applications are being used in the network but does not want the network devices to send metadata to Cisco Firepower. Which feature should be used to accomplish this?

1. Network Discovery
2. Access Control
3. Packet Tracer
4. NetFlow