350-701 Practice Test

350-701 Practice Test practice questions, page 4 of 28, with answer review and explanations.

Question 16

How is DNS tunneling used to exfiltrate data out of a corporate network?

  1. It leverages the DNS server by permitting recursive lookups to spread the attack to other DNS servers
  2. It encodes the payload with random characters that are broken into short strings and the DNS server rebuilds the exfiltrated data
  3. It redirects DNS requests to a malicious server used to steal user credentials, which allows further damage and theft on the network
  4. It corrupts DNS servers by replacing the actual IP address with a rogue address to collect information or start other attacks

Question 17

Which type of attack is social engineering?

  1. trojan
  2. MITM
  3. phishing
  4. malware

Question 18

What are two DDoS attack categories? (Choose two.)

  1. protocol
  2. source-based
  3. database
  4. sequential
  5. volume-based

Question 19

In which type of attack does the attacker insert their machine between two hosts that are communicating with each other?

  1. man-in-the-middle
  2. LDAP injection
  3. insecure API
  4. cross-site scripting

Question 20

How does Cisco Advanced Phishing Protection protect users?

  1. It utilizes sensors that send messages securely.
  2. It uses machine learning and real-time behavior analytics.
  3. It validates the sender by using DKIM.
  4. It determines which identities are perceived by the sender.