Cisco 350-701 Practice Exams
Last updated on Apr 07,2025- Exam Code: 350-701
- Exam Name: Implementing and Operating Cisco Security Core Technologies (SCOR)
- Certification Provider: Cisco
- Latest update: Apr 07,2025
Which two preventive measures are used to control cross-site scripting? (Choose two)
- A . Enable client-side scripts on a per-domain basis.
- B . Incorporate contextual output encoding/escaping.
- C . Disable cookie inspection in the HTML inspection engine.
- D . Run untrusted HTML input through an HTML sanitization engine.
- E . Same Site cookie attribute should not be used.
Which PKI enrollment method allows the user to separate authentication and enrollment actions and also provides an option to specify HTTP/TFTP commands to perform file retrieval from the server?
- A . url
- B . terminal
- C . profile
- D . selfsigned
Which Talos reputation center allows you to track the reputation of IP addresses for email and web
traffic?
- A . IP Blacklist Center
- B . File Reputation Center
- C . AMP Reputation Center
- D . IP and Domain Reputation Center
What is the primary benefit of deploying an ESA in hybrid mode?
- A . You can fine-tune its settings to provide the optimum balance between security and performance for your environment
- B . It provides the lowest total cost of ownership by reducing the need for physical appliances
- C . It provides maximum protection and control of outbound messages
- D . It provides email security while supporting the transition to the cloud
Which statement about the configuration of Cisco ASA NetFlow v9 Secure Event Logging is true?
- A . To view bandwidth usage for NetFlow records, the QoS feature must be enabled.
- B . A sysopt command can be used to enable NSEL on a specific interface.
- C . NSEL can be used without a collector configured.
- D . A flow-export event type must be defined under a policy
What is a characteristic of Firepower NGIPS inline deployment mode?
- A . ASA with Firepower module cannot be deployed.
- B . It cannot take actions such as blocking traffic.
- C . It is out-of-band from traffic.
- D . It must have inline interface pairs configured.
An engineer is configuring a Cisco ESA and wants to control whether to accept or reject email messages to a recipient address.
Which list contains the allowed recipient addresses?
- A . SAT
- B . BAT
- C . HAT
- D . RAT
Which deployment model is the most secure when considering risks to cloud adoption?
- A . Public Cloud
- B . Hybrid Cloud
- C . Community Cloud
- D . Private Cloud
Which feature is configured for managed devices in the device platform settings of the Firepower Management Center?
- A . quality of service
- B . time synchronization
- C . network address translations
- D . intrusion policy
Which feature is configured for managed devices in the device platform settings of the Firepower Management Center?
- A . quality of service
- B . time synchronization
- C . network address translations
- D . intrusion policy