Instant Access Cisco.350-701.v2026-09-02.q999 Actual Practice Test Engine for Free (Page 59)

Question 286

Using Cisco Firepower's Security Intelligence policies, upon which two criteria is Firepower block based?
(Choose two)

A.URLs
B.protocol IDs
C.IP addresses
D.MAC addresses
E.port numbers

Question 287

Which two preventive measures are used to control cross-site scripting? (Choose two)

A.Enable client-side scripts on a per-domain basis.
B.Incorporate contextual output encoding/escaping.
C.Disable cookie inspection in the HTML inspection engine.
D.Run untrusted HTML input through an HTML sanitization engine.
E.Same Site cookie attribute should not be used.

Correct Answer: B,D

Cross-site scripting (XSS) is a web security vulnerability that allows an attacker to inject malicious code into a web page that is viewed by other users. XSS can compromise the user's interaction with the web application, steal sensitive data, perform unauthorized actions, and more. To prevent XSS, web developers need to apply various defensive techniques to ensure that user-supplied data is not interpreted as code by the browser. Two of these techniques are:
* Incorporate contextual output encoding/escaping: This means that any user-supplied data that is displayed on the web page should be properly encoded or escaped according to the context where it appears. For example, if the data is inserted into an HTML attribute, it should be HTML attribute encoded; if the data is inserted into a JavaScript string, it should be JavaScript string encoded; and so on.
This prevents the data from breaking out of its intended context and being executed as code by the browser. Output encoding should be done by using a reliable library or framework that supports different contexts and encodings.
* Run untrusted HTML input through an HTML sanitization engine: This means that any user-supplied data that is intended to contain HTML markup should be filtered and validated by a sanitization engine that removes or escapes any potentially dangerous elements, attributes, or scripts. This prevents the attacker from injecting malicious HTML code that can execute scripts, load external resources, redirect the user, or perform other malicious actions. HTML sanitization should be done by using a well-tested and maintained library or framework that follows the best practices and standards for HTML filtering.
References :=
* [Implementing and Operating Cisco Security Core Technologies (SCOR) v1.0], Module 5: Securing the Cloud, Lesson 5.2: Web Application Security, Topic 5.2.2: Cross-Site Scripting (XSS)
* Cross Site Scripting Prevention Cheat Sheet - OWASP
* What is cross-site scripting (XSS) and how to prevent it? - Web Security Academy

Question 288

Which telemetry data captures variations seen within the flow, such as the packets TTL, IP/TCP flags, and payload length?

A.interpacket variation
B.software package variation
C.flow insight variation
D.process details variation

Question 289

An engineer needs to detect and quarantine a file named abc424400664 zip based on the MD5 signature of the file using the Outbreak Control list feature within Cisco Advanced Malware Protection (AMP) for Endpoints The configured detection method must work on files of unknown disposition Which Outbreak Control list must be configured to provide this?

A.Blocked Application
B.Simple Custom Detection
C.Android Custom Detection
D.Advanced Custom Detection

Question 290

What is the purpose of the Structured Threat Information eXpression?

A.fast and intelligent responses
B.stealing sensitive information
C.cyber threat intelligence maintenance
D.sharing of cyber threat information

Question 286

Question 287

Question 288

Question 289

Question 290

Download PDF File