Free 350-701 Exam Braindumps
Implementing and Operating Cisco Security Core Technologies Questions 161–165 (page: 34)

Updated On: 10-Feb-2026

What provides the ability to program and monitor networks from somewhere other than the DNAC GUI?

  1. NetFlow
  2. desktop client
  3. ASDM
  4. API

Answer(s): D



An organization has two machines hosting web applications. Machine 1 is vulnerable to SQL injection while machine 2 is vulnerable to buffer overflows.
What action would allow the attacker to gain access to machine 1 but not machine 2?

  1. sniffing the packets between the two hosts
  2. sending continuous pings
  3. overflowing the buffer's memory
  4. inserting malicious commands into the database

Answer(s): D



An organization is trying to improve their Defense in Depth by blocking malicious destinations prior to a connection being established. The solution must be able to block certain applications from being used within the network.
Which product should be used to accomplish this goal?

  1. Cisco Firepower
  2. Cisco Umbrella
  3. ISE
  4. AMP

Answer(s): B

Explanation:

Cisco Umbrella protects users from accessing malicious domains by proactively analyzing and blocking unsafe destinations ­ before a connection is ever made. Thus it can protect from phishing attacks by blocking suspicious domains when users click on the given links that an attacker sent.



A company is experiencing exfiltration of credit card numbers that are not being stored on-premise.
The company needs to be able to protect sensitive data throughout the full environment.
Which tool should be used to accomplish this goal?

  1. Security Manager
  2. Cloudlock
  3. Web Security Appliance
  4. Cisco ISE

Answer(s): B

Explanation:

Cisco Cloudlock is a cloud-native cloud access security broker (CASB) that helps you move to the cloud safely. It protects your cloud users, data, and apps. Cisco Cloudlock provides visibility and compliance checks, protects data against misuse and exfiltration, and provides threat protections against malware like ransomware.



An engineer is trying to securely connect to a router and wants to prevent insecure algorithms from being used.
However, the connection is failing.
Which action should be taken to accomplish this goal?

  1. Disable telnet using the no ip telnet command.
  2. Enable the SSH server using the ip ssh server command.
  3. Configure the port using the ip ssh port 22 command.
  4. Generate the RSA key using the crypto key generate rsa command.

Answer(s): D

Explanation:

In this question, the engineer was trying to secure the connection so maybe he was trying to allow SSH to the device. But maybe something went wrong so the connection was failing (the connection used to be good). So maybe he was missing the "crypto key generate rsa" command.



Viewing page 34 of 123
Viewing questions 166 - 170 out of 727 questions


Post your Comments and Discuss Cisco 350-701 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!