Free 350-701 Exam Braindumps
Implementing and Operating Cisco Security Core Technologies Questions 286–290 (page: 59)

Updated On: 10-Feb-2026

What is a capability of Cisco ASA Netflow?

  1. It filters NSEL events based on traffic
  2. It generates NSEL events even if the MPF is not configured
  3. It logs all event types only to the same collector
  4. It sends NetFlow data records from active and standby ASAs in an active standby failover pair

Answer(s): A

Explanation:

https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11- 0/user_guide/b_WSA_UserGuide/b_WSA_UserGuide_chapter_01101.html

Policy Order The order in which policies are listed in a policy table determines the priority with which they are applied to Web requests. Web requests are checked against policies beginning at the top of the table and ending at the first policy matched. Any policies below that point in the table are not processed. If no user- defined policy is matched against a Web request, then the global policy for that policy type is applied. Global policies are always positioned last in Policy tables and cannot be re-ordered.



Which component of Cisco umbrella architecture increases reliability of the service?

  1. Anycast IP
  2. AMP Threat grid
  3. Cisco Talos
  4. BGP route reflector

Answer(s): C



What is the benefit of integrating Cisco ISE with a MDM solution?

  1. It provides compliance checks for access to the network
  2. It provides the ability to update other applications on the mobile device
  3. It provides the ability to add applications to the mobile device through Cisco ISE
  4. It provides network device administration access

Answer(s): A


Reference:

https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ISE_admin_guide_24/ m_ise_interoperability_mdm.html



An administrator configures a new destination list in Cisco Umbrella so that the organization can block specific domains for its devices.
What should be done to ensure that all subdomains of domain.com are blocked?

  1. Configure the *.com address in the block list.
  2. Configure the *.domain.com address in the block list
  3. Configure the *.domain.com address in the block list
  4. Configure the domain.com address in the block list

Answer(s): C



An organization wants to provide visibility and to identify active threats in its network using a VM.
The organization wants to extract metadata from network packet flow while ensuring that payloads are not retained or transferred outside the network.
Which solution meets these requirements?

  1. Cisco Umbrella Cloud
  2. Cisco Stealthwatch Cloud PNM
  3. Cisco Stealthwatch Cloud PCM
  4. Cisco Umbrella On-Premises

Answer(s): B

Explanation:

Private Network Monitoring (PNM) provides visibility and threat detection for the on-premises network, delivered from the cloud as a SaaS solution. It is the perfect solution for organizations who prefer SaaS products and desire better awareness and security in their on-premises environments while reducing capital expenditure and operational overhead. It works by deploying lightweight software in a virtual machine or server that can consume a variety of native sources of telemetry or extract metadata from network packet flow. It encrypts this metadata and sends it to the Stealthwatch Cloud analytics platform for analysis. Stealthwatch Cloud consumes metadata only. The packet payloads are never retained or transferred outside the network.
This lab focuses on how to configure a Stealthwatch Cloud Private Network Monitoring (PNM) Sensor, in order to provide visibility and effectively identify active threats, and monitors user and device behavior within onpremises networks.
The Stealthwatch Cloud PNM Sensor is an extremely flexible piece of technology, capable of being utilized in a number of different deployment scenarios. It can be deployed as a complete Ubuntu based virtual appliance on different hypervisors (e.g. ­VMware, VirtualBox). It can be deployed on hardware running a number of different Linux-based operating systems.


Reference:

https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2019/pdf/5eU6DfQV/LTRSEC- 2240-LG2.pdf



Viewing page 59 of 123
Viewing questions 291 - 295 out of 727 questions


Post your Comments and Discuss Cisco 350-701 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!