An organization wants to use Cisco FTD or Cisco ASA devices. Specific URLs must be blocked from being accessed via the firewall which requires that the administrator input the bad URL categories that the organization wants blocked into the access policy.Which solution should be used to meet this requirement?
Answer(s): C
An administrator configures a Cisco WSA to receive redirected traffic over ports 80 and 443. The organization requires that a network device with specific WSA integration capabilities be configured to send the traffic to the WSA to proxy the requests and increase visibility, while making this invisible to the users.What must be done on the Cisco WSA to support these requirements?
Answer(s): A
An administrator configures new authorization policies within Cisco ISE and has difficulty profiling the devices. Attributes for the new Cisco IP phones that are profiled based on the RADIUS authentication are seen however the attributes for CDP or DHCP are not.What should the administrator do to address this issue?
Answer(s): D
Device sensor is a feature of access devices. It allows to collect information about connected endpoints. Mostly,information collected by Device Sensor can come from the following protocols:+ Cisco Discovery Protocol (CDP)+ Link Layer Discovery Protocol (LLDP)+ Dynamic Host Configuration Protocol (DHCP)
https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/200292- ConfigureDevice-Sensor-for-ISE-Profilin.html
A network engineer must monitor user and device behavior within the on-premises network. This data must be sent to the Cisco Stealthwatch Cloud analytics platform for analysis.What must be done to meet this requirement using the Ubuntu-based VM appliance deployed in a VMware-based hypervisor?
Answer(s): B
The Stealthwatch Cloud Private Network Monitoring (PNM) Sensor is an extremely flexible piece of technology,capable of being utilized in a number of different deployment scenarios. It can be deployed as a completeUbuntu based virtual appliance on different hypervisors (e.g. VMware, VirtualBox). It can be deployed on hardware running a number of different Linux-based operating systems.
https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2019/pdf/5eU6DfQV/LTRSEC- 2240-LG2.pdf
An organization uses Cisco FMC to centrally manage multiple Cisco FTD devices. The default management port conflicts with other communications on the network and must be changed.What must be done to ensure that all devices can communicate together?
The FMC and managed devices communicate using a two-way, SSL-encrypted communication channel, which by default is on port 8305.Cisco strongly recommends that you keep the default settings for the remote management port, but if the management port conflicts with other communications on your network, you can choose a different port. If you change the management port, you must change it for all devices in your deployment that need to communicate with each other.
https://www.cisco.com/c/en/us/td/docs/security/firepower/misc/fmc-ftd-mgmt-nw/fmc- ftd-mgmtnw.html
Post your Comments and Discuss Cisco 350-701 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 350-701 content, but please register or login to continue.