Free 350-701 Exam Braindumps
Implementing and Operating Cisco Security Core Technologies Questions 166–170 (page: 35)

Updated On: 10-Feb-2026

A network administrator is using the Cisco ESA with AMP to upload files to the cloud for analysis. The network is congested and is affecting communication. How will the Cisco ESA handle any files which need analysis?

  1. AMP calculates the SHA-256 fingerprint, caches it, and periodically attempts the upload.
  2. The file is queued for upload when connectivity is restored.
  3. The file upload is abandoned.
  4. The ESA immediately makes another attempt to upload the file.

Answer(s): C

Explanation:

The appliance will try once to upload the file; if upload is not successful, for example because of connectivity problems, the file may not be uploaded. If the failure was because the file analysis server was overloaded, the upload will be attempted once more.


Reference:

https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118796- technoteesa-00.html
In this question, it stated "the network is congested" (not the file analysis server was overloaded) so the appliance will not try to upload the file again.



Which type of algorithm provides the highest level of protection against brute-force attacks?

  1. PFS
  2. HMAC
  3. MD5
  4. SHA

Answer(s): D



What must be configured in Cisco ISE to enforce reauthentication of an endpoint session when an endpoint is deleted from an identity group?

  1. posture assessment
  2. CoA
  3. external identity source
  4. SNMP probe

Answer(s): B

Explanation:

Cisco ISE allows a global configuration to issue a Change of Authorization (CoA) in the Profiler Configuration page that enables the profiling service with more control over endpoints that are already authenticated.
One of the settings to configure the CoA type is "Reauth". This option is used to enforce reauthentication of an already authenticated endpoint when it is profiled.


Reference:

https://www.cisco.com/c/en/us/td/docs/security/ise/1- 3/admin_guide/b_ise_admin_guide_13/
b_ise_admin_guide_sample_chapter_010101.html



A network administrator is configuring a rule in an access control policy to block certain URLs and selects the "Chat and Instant Messaging" category.
Which reputation score should be selected to accomplish this goal?

  1. 1
  2. 3
  3. 5
  4. 10

Answer(s): D

Explanation:

We choose "Chat and Instant Messaging" category in "URL Category":



To block certain URLs we need to choose URL Reputation from 6 to 10.



Which group within Cisco writes and publishes a weekly newsletter to help cybersecurity professionals remain aware of the ongoing and most prevalent threats?

  1. PSIRT
  2. Talos
  3. CSIRT
  4. DEVNET

Answer(s): B

Explanation:

Talos Threat Source is a regular intelligence update from Cisco Talos, highlighting the biggest threats each week and other security news.


Reference:

https://talosintelligence.com/newsletters



Viewing page 35 of 123
Viewing questions 171 - 175 out of 727 questions


Post your Comments and Discuss Cisco 350-701 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!