Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. Cisco
  5. 350-701

Cisco 350-701 Exam Questions
Implementing and Operating Cisco Security Core Technologies (Page 23 )

Updated On: 15-Feb-2026
Page 23 of 123
PDF with 727 Questions

Which SNMPv3 configuration must be used to support the strongest security possible?

  1. asa-host(config)#snmp-server group myv3 v3 priv asa-host(config)#snmp-server user andy myv3 auth sha cisco priv des ciscXXXXXXXX asa-host(config)#snmp-server host inside 10.255.254.1 version 3 andy
  2. asa-host(config)#snmp-server group myv3 v3 noauth asa-host(config)#snmp-server user andy myv3 auth sha cisco priv aes 256 ciscXXXXXXXX asa-host(config)#snmp-server host inside 10.255.254.1 version 3 andy
  3. asa-host(config)#snmpserver group myv3 v3 noauth asa-host(config)#snmp-server user andy myv3 auth sha cisco priv 3des ciscXXXXXXXX asa-host(config)#snmp-server host inside 10.255.254.1 version 3 andy
  4. asa-host(config)#snmp-server group myv3 v3 priv asa-host(config)#snmp-server user andy myv3 auth sha cisco priv aes 256 ciscXXXXXXXX asa-host(config)#snmp-server host inside 10.255.254.1 version 3 andy

Answer(s): D



Refer to the exhibit.



Which command was used to generate this output and to show which ports are authenticating with dot1x or mab?

  1. show authentication registrations
  2. show authentication method
  3. show dot1x all
  4. show authentication sessions

Answer(s): D

Explanation:

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/s1/sec-s1-xe-3se-3850-cr-book/sec-s1- xe-3se-3850-cr-book_chapter_01.html#wp3404908137
Displaying the Summary of All Auth Manager Sessions on the Switch Enter the following:

Switch# show authentication sessions
Interface MAC Address Method Domain Status Session ID Gi1/48 0015.63b0.f676 dot1x DATA Authz Success 0A3462B1000000102983C05C Gi1/5 000f.23c4.a401 mab DATA Authz Success 0A3462B10000000D24F80B58 Gi1/5 0014.bf5d.d26d dot1x DATA Authz Success 0A3462B10000000E29811B94



What Cisco command shows you the status of an 802.1X connection on interface gi0/1?

  1. show authorization status
  2. show authen sess int gi0/1
  3. show connection status gi0/1
  4. show ver gi0/1

Answer(s): B



Refer to the exhibit.



What does the number 15 represent in this configuration?

  1. privilege level for an authorized user to this router
  2. access list that identifies the SNMP devices that can access the router
  3. interval in seconds between SNMPv3 authentication attempts
  4. number of possible failed attempts until the SNMPv3 user is locked out

Answer(s): B

Explanation:

The syntax of this command is shown below:
snmp-server group [group-name {v1 | v2c | v3 [auth | noauth | priv]}] [read read-view] [write write- view] [notify notify-view] [access access-list]
The command above restricts which IP source addresses are allowed to access SNMP functions on the router. You could restrict SNMP access by simply applying an interface ACL to block incoming SNMP packets that don't come from trusted servers. However, this would not be as effective as using the global SNMP commands shown in this recipe. Because you can apply this method once for the whole router, it is much simpler than applying ACLs to block SNMP on all interfaces separately. Also, using interface ACLs would block not only SNMP packets intended for this router, but also may stop SNMP packets that just happened to be passing through on their way to some other destination device.



Under which two circumstances is a CoA issued? (Choose two)

  1. A new authentication rule was added to the policy on the Policy Service node.
  2. An endpoint is deleted on the Identity Service Engine server.
  3. A new Identity Source Sequence is created and referenced in the authentication policy.
  4. An endpoint is profiled for the first time.
  5. A new Identity Service Engine server is added to the deployment with the Administration persona

Answer(s): B,D

Explanation:

The profiling service issues the change of authorization in the following cases:
­ Endpoint deleted--When an endpoint is deleted from the Endpoints page and the endpoint is disconnected or removed from the network.
An exception action is configured--If you have an exception action configured per profile that leads to an unusual or an unacceptable event from that endpoint. The profiling service moves the endpoint to the corresponding static profile by issuing a CoA.
­ An endpoint is profiled for the first time--When an endpoint is not statically assigned and profiled for the first time; for example, the profile changes from an unknown to a known profile. + An endpoint identity group has changed--When an endpoint is added or removed from an endpoint identity group that is used by an authorization policy. The profiling service issues a CoA when there is any change in an endpoint identity group, and the endpoint identity group is used in the authorization policy for the following:
++ The endpoint identity group changes for endpoints when they are dynamically profiled ++ The endpoint identity group changes when the static assignment flag is set to true for a dynamic endpoint ­ An endpoint profiling policy has changed and the policy is used in an authorization policy--When an endpoint profiling policy changes, and the policy is included in a logical profile that is used in an authorization policy. The endpoint profiling policy may change due to the profiling policy match or when an endpoint is statically assigned to an endpoint profiling policy, which is associated to a logical profile. In both the cases, the profiling service issues a CoA, only when the endpoint profiling policy is used in an authorization policy.


Reference:

https://www.cisco.com/c/en/us/td/docs/security/ise/2- 1/admin_guide/b_ise_admin_guide_21/
b_ise_admin_guide_20_chapter_010100.html






Post your Comments and Discuss Cisco 350-701 exam dumps with other Community members:

Join the 350-701 Discussion