Instant Access Cisco.350-701.v2023-04-26.q207 Actual Practice Test Engine for Free (Page 26)

40%off

350-701 Premium Dumps

Latest 350-701 Exam Premium Dumps provide by TrainingQuiz.com to help you Passing 350-701 Exam! TrainingQuiz.com offers the updated 350-701 exam dumps, the TrainingQuiz.com 350-701 exam questions has been updated to correct Answer. Get the latest TrainingQuiz.com 350-701 pdf dumps with Exam Engine here:

(727 Q&As Dumps, 40%OFF Special Discount: DumpsDB)

Question 121

An organization has a requirement to collect full metadata information about the traffic going through their AWS cloud services They want to use this information for behavior analytics and statistics Which two actions must be taken to implement this requirement? (Choose two.)

A.Configure Cisco Thousand Eyes to ingest AWS information.
B.Send VPC Flow Logs to Cisco Stealthwatch Cloud.
C.Configure Cisco ACI to ingest AWS information.
D.Send syslog from AWS to Cisco Stealthwatch Cloud.
E.Configure Cisco Stealthwatch Cloud to ingest AWS information

Question 122

An administrator is establishing a new site-to-site VPN connection on a Cisco IOS router. The organization needs to ensure that the ISAKMP key on the hub is used only for terminating traffic from the IP address of
172.19.20.24. Which command on the hub will allow the administrator to accomplish this?

A.crypto ca identity 172.19.20.24
B.crypto isakmp key Cisco0123456789 172.19.20.24
C.crypto enrollment peer address 172.19.20.24
D.crypto isakmp identity address 172.19.20.24

Correct Answer: B

The command "crypto isakmp identity address 172.19.20.24" is not valid. We can only use "crypto isakmp identity {address | hostname}. The following example uses preshared keys at two peers and sets both their ISAKMP identities to the IP address.
At the local peer (at 10.0.0.1) the ISAKMP identity is set and the preshared key is specified:
crypto isakmp identity address
crypto isakmp key sharedkeystring address 192.168.1.33
At the remote peer (at 192.168.1.33) the ISAKMP identity is set and the same preshared key is specified:
crypto isakmp identity address
crypto isakmp key sharedkeystring address 10.0.0.1
The command "crypto isakmp identity address 172.19.20.24" is not valid. We can only use "crypto isakmp identity {address | hostname}. The following example uses preshared keys at two peers and sets both their ISAKMP identities to the IP address.
At the local peer (at 10.0.0.1) the ISAKMP identity is set and the preshared key is specified:
crypto isakmp identity address
crypto isakmp key sharedkeystring address 192.168.1.33
At the remote peer (at 192.168.1.33) the ISAKMP identity is set and the same preshared key is specified:
crypto isakmp identity address
crypto isakmp key sharedkeystring address 10.0.0.1
Reference:
The command "crypto enrollment peer address" is not valid either.
The command "crypto ca identity ..." is only used to declare a trusted CA for the router and puts you in the caidentity configuration mode. Also it should be followed by a name, not an IP address. For example: "crypto ca identity CA-Server" -> Answer A is not correct.
Only answer B is the best choice left.
The command "crypto isakmp identity address 172.19.20.24" is not valid. We can only use "crypto isakmp identity {address | hostname}. The following example uses preshared keys at two peers and sets both their ISAKMP identities to the IP address.
At the local peer (at 10.0.0.1) the ISAKMP identity is set and the preshared key is specified:
crypto isakmp identity address
crypto isakmp key sharedkeystring address 192.168.1.33
At the remote peer (at 192.168.1.33) the ISAKMP identity is set and the same preshared key is specified:
crypto isakmp identity address
crypto isakmp key sharedkeystring address 10.0.0.1
The command "crypto enrollment peer address" is not valid either.
The command "crypto ca identity ..." is only used to declare a trusted CA for the router and puts you in the caidentity configuration mode. Also it should be followed by a name, not an IP address. For example: "crypto ca identity CA-Server" -> Answer A is not correct.
The command "crypto enrollment peer address" is not valid either.
The command "crypto ca identity ..." is only used to declare a trusted CA for the router and puts you in the caidentity configuration mode. Also it should be followed by a name, not an IP address. For example: "crypto ca identity CA-Server" -> Answer A is not correct.
Only answer B is the best choice left.

Question 123

Drag and drop the common security threats from the left onto the definitions on the right.

Question 124

Which attack is preventable by Cisco ESA but not by the Cisco WSA?

A.buffer overflow
B.DoS
C.SQL injection
D.phishing
Explanation
The following are the benefits of deploying Cisco Advanced Phishing Protection on the Cisco Email Security Gateway:
Prevents the following:
+ Attacks that use compromised accounts and social engineering.
+ Phishing, ransomware, zero-day attacks and spoofing.
+ BEC with no malicious payload or URL.

Question 125

Drag and drop the VPN functions from the left onto the description on the right.