350-701 Practice Test

350-701 Practice Test practice questions, page 26 of 28, with answer review and explanations.

Question 126

An engineer is implementing NTP authentication within their network and has configured both the client and server devices with the command ntp authentication-key 1 md5 Cisc392481137. The server at 1.1.1.1 is attempting to authenticate to the client at 1.1.1.2, however is unable to do so. Which command is required to enable the client to accept the server's authentication key?

  1. ntp server 1.1.1.2 key 1
  2. ntp peer 1.1.1.2 key 1
  3. ntp server 1.1.1.1 key 1
  4. ntp peer 1.1.1.1 key 1

Question 127

Due to a traffic storm on the network, two interfaces were error-disabled, and both interfaces sent SNMP traps. Which two actions must be taken to ensure that interfaces are put back into service? (Choose two.)

  1. Enable the snmp-server enable traps command and wait 300 seconds.
  2. Use EEM to have the ports return to service automatically in less than 300 seconds
  3. Ensure that interfaces are configured with the error-disable detection and recovery feature.
  4. Have Cisco Prime Infrastructure issue an SNMP set command to re-enable the ports after the preconfigured interval.
  5. Enter the shutdown and no shutdown commands on the interfaces.

Question 128

Refer to the exhibit. An administrator is adding a new Cisco FTD device to their network and wants to manage it with Cisco FMC. The Cisco FTD uses a registration key of Cisc392481137 and is not behind a NAT device. Which command is needed to enable this on the Cisco FTD?

  1. configure manager add <FMC IP address> <registration key> 16
  2. configure manager add DONTRESOLVE <registration key> FTD123
  3. configure manager add <FMC IP address> <registration key>
  4. configure manager add DONTRESOLVE <registration key>

Question 129

A network administrator needs to find out what assets currently exist on the network. Third-party systems need to be able to feed host data into Cisco Firepower. What must be configured to accomplish this?

  1. a Network Analysis policy to receive NetFlow data from the host
  2. a File Analysis policy to send file data into Cisco Firepower
  3. a Network Discovery policy to receive data from the host
  4. a Threat Intelligence policy to download the data from the host

Question 130

Which suspicious pattern enables the Cisco Tetration platform to learn the normal behavior of users?

  1. file access from a different user
  2. user login suspicious behavior
  3. privilege escalation
  4. interesting file access