What can be integrated with Cisco Threat Intelligence Director to provide information about security threats,which allows the SOC to proactively automate responses to those threats?
Answer(s): C
Cisco Threat Intelligence Director (CTID) can be integrated with existing Threat Intelligence Platforms deployed by your organization to ingest threat intelligence automatically.
https://blogs.cisco.com/developer/automate-threat-intelligence-using-cisco-threat- intelligencedirector
Which solution combines Cisco IOS and IOS XE components to enable administrators to recognize applications, collect and send network metrics to Cisco Prime and other third-party management tools, and prioritize application traffic?
Answer(s): B
The Cisco Application Visibility and Control (AVC) solution leverages multiple technologies to recognize,analyze, and control over 1000 applications, including voice and video, email, file sharing, gaming, peer-to-peer(P2P), and cloud-based applications. AVC combines several Cisco IOS/IOS XE components, as well as communicating with external tools, to integrate the following functions into a powerful solution...
https://www.cisco.com/c/en/us/td/docs/ios/solutions_docs/avc/guide/avc-user-guide/ avc_tech_overview.html
Which two activities can be done using Cisco DNA Center? (Choose two)
Answer(s): B,E
Cisco DNA Center has four general sections aligned to IT workflows:Design: Design your network for consistent configurations by device and by site. Physical maps and logical topologies help provide quick visual reference. The direct import feature brings in existing maps, images, and topologies directly from Cisco Prime Infrastructure and the Cisco Application Policy Infrastructure ControllerEnterprise Module (APIC-EM), making upgrades easy and quick. Device configurations by site can be consolidated in a "golden image" that can be used to automatically provision new network devices. These new devices can either be pre-staged by associating the device details and mapping to a site. Or they can be claimed upon connection and mapped to the site. Policy: Translate business intent into network policies and apply those policies, such as access control, traffic routing, and quality of service, consistently over the entire wired and wireless infrastructure. Policy-based access control and network segmentation is a critical function of the Cisco Software-Defined Access (SDAccess) solution built from Cisco DNA Center and Cisco Identity Services Engine (ISE). Cisco AI Network Analytics and Cisco Group-Based Policy Analytics running in the Cisco DNA Center identify endpoints, group similar endpoints, and determine group communication behavior. Cisco DNA Center then facilitates creating policies that determine the form of communication allowed between and within members of each group. ISE then activates the underlying infrastructure and segments the network creating a virtual overlay to follow these policies consistently. Such segmenting implements zero-trust security in the workplace, reduces risk, contains threats, and helps verify regulatory compliance by giving endpoints just the right level of access they need.Provision: Once you have created policies in Cisco DNA Center, provisioning is a simple drag-and- drop task.The profiles (called scalable group tags or "SGTs") in the Cisco DNA Center inventory list are assigned a policy, and this policy will always follow the identity. The process is completely automated and zero-touch. New devices added to the network are assigned to an SGT based on identity--greatly facilitating remote office setups.Assurance: Cisco DNA Assurance, using AI/ML, enables every point on the network to become a sensor, sending continuous streaming telemetry on application performance and user connectivity in real time. The clean and simple dashboard shows detailed network health and flags issues. Then,guided remediation automates resolution to keep your network performing at its optimal with less mundane troubleshooting work.The outcome is a consistent experience and proactive optimization of your network, with less time spent on troubleshooting tasks.
https://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/dna- center/nb-06- dna-center-so-cte-en.html
What must be used to share data between multiple security products?
Which Cisco product is open, scalable, and built on IETF standards to allow multiple security products fromCisco and other vendors to share data and interoperate with each other?
With Cisco pxGrid (Platform Exchange Grid), your multiple security products can now share data and work together. This open, scalable, and IETF standards-driven platform helps you automate security to get answers and contain threats faster.
Post your Comments and Discuss Cisco 350-701 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 350-701 content, but please register or login to continue.