An engineer wants to automatically assign endpoints that have a specific OUI into a new endpoint group.Which probe must be enabled for this type of profiling to work?
Answer(s): B
Cisco ISE can determine the type of device or endpoint connecting to the network by performing "profiling."Profiling is done by using DHCP, SNMP, Span, NetFlow, HTTP, RADIUS, DNS, or NMAP scans to collect as much metadata as possible to learn the device fingerprint. NMAP ("Network Mapper") is a popular network scanner which provides a lot of features. One of them is theOUI (Organizationally Unique Identifier) information. OUI is the first 24 bit or 6 hexadecimal value of the MACaddress.Note: DHCP probe cannot collect OUIs of endpoints. NMAP scan probe can collect these endpoint attributes:+ EndPointPolicy+ LastNmapScanCount+ NmapScanCount+ OUI+ Operating-system
http://www.network-node.com/blog/2016/1/2/ise-20-profiling
What are two reasons for implementing a multifactor authentication solution such as Duo Security provide to an organization? (Choose two)
Answer(s): A,D
Two-factor authentication adds a second layer of security to your online accounts. Verifying your identity using a second factor (like your phone or other mobile device) prevents anyone but you from logging in, even if they know your password.Note: Single sign-on (SSO) is a property of identity and access management that enables users to securely authenticate with multiple applications and websites by logging in only once with just one set of credentials(username and password). With SSO, the application or website that the user is trying to access relies on a trusted third party to verify that users are who they say they are.
An engineer configured a new network identity in Cisco Umbrella but must verify that traffic is being routed through the Cisco Umbrella network.Which action tests the routing?
Which feature within Cisco Umbrella allows for the ability to inspect secure HTTP traffic?
Answer(s): C
SSL Decryption is an important part of the Umbrella Intelligent Proxy. he feature allows the Intelligent Proxy to go beyond simply inspecting normal URLs and actually proxy and inspect traffic that's sent over HTTPS. The SSL Decryption feature does require the root certificate be installed.
https://support.umbrella.com/hc/en-us/articles/115004564126-SSL-Decryption-in-the- IntelligentProxy
Post your Comments and Discuss Cisco® 350-701 exam with other Community members:
David A commented on January 16, 2024 Good Colombia Anonymous upvote
Kim commented on May 25, 2023 I just purchased and downloaded my files. Everything looks good so far. UNITED STATES upvote
Our website is free, but we have to fight against bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 350-701 content, but please register or login to continue.