CompTIA
Checkpoint
ISC
HP
Dell
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
Certiport
ISC2
All Vendors
  2. Home
  3. Exams
  4. Cisco®
  5. 350-701

Free 350-701 Exam Braindumps (page: 13)

Page 13 of 153
PDF with 703 Questions

Which feature is supported when deploying Cisco ASAv within AWS public cloud?

  1. multiple context mode
  2. user deployment of Layer 3 networks
  3. IPv6
  4. clustering

Answer(s): B

Explanation:

The ASAv on AWS supports the following features:
+ Support for Amazon EC2 C5 instances, the next generation of the Amazon EC2 Compute Optimized instance family.
+ Deployment in the Virtual Private Cloud (VPC)
+ Enhanced networking (SR-IOV) where available
+ Deployment from Amazon Marketplace
+ Maximum of four vCPUs per instance
+ User deployment of L3 networks
+ Routed mode (default)
Note: The Cisco Adaptive Security Virtual Appliance (ASAv) runs the same software as physical Cisco ASAs to deliver proven security functionality in a virtual form factor. The ASAv can be deployed in the public AWS cloud.
It can then be configured to protect virtual and physical data center workloads that expand, contract,

or shift their location over time.


Reference:

https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/asav/quick-start-book/asav-96 qsg/asavaws.html



Which statement describes a traffic profile on a Cisco Next Generation Intrusion Prevention System?

  1. It allows traffic if it does not meet the profile.
  2. It defines a traffic baseline for traffic anomaly deduction.
  3. It inspects hosts that meet the profile with more intrusion rules.
  4. It blocks traffic if it does not meet the profile.

Answer(s): B



Which statement about IOS zone-based firewalls is true?

  1. An unassigned interface can communicate with assigned interfaces
  2. Only one interface can be assigned to a zone.
  3. An interface can be assigned to multiple zones.
  4. An interface can be assigned only to one zone.

Answer(s): D



What is a characteristic of Cisco ASA Netflow v9 Secure Event Logging?

  1. It tracks flow-create, flow-teardown, and flow-denied events.
  2. It provides stateless IP flow tracking that exports all records of a specific flow.
  3. It tracks the flow continuously and provides updates every 10 seconds.
  4. Its events match all traffic classes in parallel.

Answer(s): A

Explanation:

The ASA and ASASM implementations of NetFlow Secure Event Logging (NSEL) provide a stateful, IP flow tracking method that exports only those records that indicate significant events in a flow. The significant events that are tracked include flow-create, flow-teardown, and flow-denied (excluding those flows that are denied by EtherType ACLs).


Reference:

https://www.cisco.com/c/en/us/td/docs/security/asa/asa92/configuration/general/asa- general-cli/ monitor-nsel.html



Page 13 of 153



Post your Comments and Discuss Cisco® 350-701 exam with other Community members:

David A commented on January 16, 2024
Good Colombia
Anonymous
upvote

Kim commented on May 25, 2023
I just purchased and downloaded my files. Everything looks good so far.
UNITED STATES
upvote