350-701 Practice Test

350-701 Practice Test practice questions, page 27 of 28, with answer review and explanations.

Question 131

Which attribute has the ability to change during the RADIUS CoA?

  1. authorization
  2. NTP
  3. accessibility
  4. membership

Question 132

An administrator configures new authorization policies within Cisco ISE and has difficulty profiling the devices. Attributes for the new Cisco IP phones that are profiled based on the RADIUS authentication are seen; however, the attributes for CDP or DHCP are not. What should the administrator do to address this issue?

  1. Configure a service template within the switch to standardize the port configurations so that the correct information is sent to Cisco ISE.
  2. Configure the ip dhcp snooping trust command on the DHCP interfaces to get the information to Cisco ISE.
  3. Configure the authentication port-control auto feature within Cisco ISE to identify the devices that are trying to connect.
  4. Configure the device sensor feature within the switch to send the appropriate protocol information.

Question 133

An organization deploys multiple Cisco FTD appliances and wants to manage them using one centralized solution. The organization does not have a local VM but does have existing Cisco ASA that must migrate over to Cisco FTDs. Which solution meets the needs of the organization?

  1. Cisco FMC
  2. CDO
  3. CSM
  4. Cisco FDM

Question 134

What is a benefit of using telemetry over SNMP to configure new routers for monitoring purposes?

  1. Telemetry uses push and pull, which makes it more secure than SNMP.
  2. Telemetry uses push and pull, which makes it more scalable than SNMP.
  3. Telemetry uses a push method, which makes it faster than SNMP.
  4. Telemetry uses a pull method, which makes it more reliable than SNMP.

Question 135

Refer to the exhibit. A network engineer is testing NTP authentication and realizes that any device synchronizes time with this router and that NTP authentication is not enforced. What is the cause of this issue?

  1. The hashing algorithm that was used was MD5, which is unsupported.
  2. The key was configured in plain text.
  3. NTP authentication is not enabled.
  4. The router was not rebooted after the NTP configuration updated.