Free 350-701 Exam Braindumps
Implementing and Operating Cisco Security Core Technologies Questions 306–310 (page: 63)

Updated On: 10-Feb-2026

A network engineer is trying to figure out whether FlexVPN or DMVPN would fit better in their environment.
They have a requirement for more stringent security multiple security associations for the connections, more efficient VPN establishment as well consuming less bandwidth.
Which solution would be best for this and why?

  1. DMVPN because it supports IKEv2 and FlexVPN does not
  2. FlexVPN because it supports IKEv2 and DMVPN does not
  3. FlexVPN because it uses multiple SAs and DMVPN does not
  4. DMVPN because it uses multiple SAs and FlexVPN does not

Answer(s): C

Explanation:

FlexVPN supports IKEv2 -> Answer A is not correct.
DMVPN supports both IKEv1 & IKEv2 -> Answer B is not correct. FlexVPN support multiple SAs -> Answer D is not correct.



How does Cisco Workload Optimization Manager help mitigate application performance issues?

  1. It deploys an AWS Lambda system
  2. It automates resource resizing
  3. It optimizes a flow path
  4. It sets up a workload forensic score

Answer(s): B

Explanation:

Cisco Workload Optimization Manager provides specific real-time actions that ensure workloads get the resources they need when they need them, enabling continuous placement, resizing, and capacity decisions that can be automated, driving continuous health in the environment. You can automate the software's decisions according to your level of comfort: recommend (view only), manual (select and apply), or automated (executed in real time by software).


Reference:

https://www.cisco.com/c/dam/en/us/solutions/collateral/data-center-virtualization/one- enterprisesuite/solution-overview-c22-739078.pdf



An organization configures Cisco Umbrella to be used for its DNS services. The organization must be able to block traffic based on the subnet that the endpoint is on but it sees only the requests from its public IP address instead of each internal IP address.
What must be done to resolve this issue?

  1. Set up a Cisco Umbrella virtual appliance to internally field the requests and see the traffic of each IP address
  2. Use the tenant control features to identify each subnet being used and track the connections within the
    Cisco Umbrella dashboard
  3. Install the Microsoft Active Directory Connector to give IP address information stitched to the requests in the Cisco Umbrella dashboard
  4. Configure an internal domain within Cisco Umbrella to help identify each address and create policy from the domains

Answer(s): A



What is a difference between a DoS attack and a DDoS attack?

  1. A DoS attack is where a computer is used to flood a server with TCP and UDP packets whereas a DDoS attack is where multiple systems target a single system with a DoS attack
  2. A DoS attack is where a computer is used to flood a server with TCP and UDP packets whereas a DDoS attack is where a computer is used to flood multiple servers that are distributed over a LAN
  3. A DoS attack is where a computer is used to flood a server with UDP packets whereas a DDoS attack is where a computer is used to flood a server with TCP packets
  4. A DoS attack is where a computer is used to flood a server with TCP packets whereas a DDoS attack is where a computer is used to flood a server with UDP packets

Answer(s): A



Which two capabilities of Integration APIs are utilized with Cisco DNA center? (Choose two)

  1. Upgrade software on switches and routers
  2. Third party reporting
  3. Connect to ITSM platforms
  4. Create new SSIDs on a wireless LAN controller
  5. Automatically deploy new virtual routers

Answer(s): B,C


Reference:

https://developer.cisco.com/docs/dna-center/#!cisco-dna-center-platform- overview/integration-api-westbound



Viewing page 63 of 123
Viewing questions 311 - 315 out of 727 questions


Post your Comments and Discuss Cisco 350-701 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!