[2025年11月27日] あなたを合格させる350-701無料最新問題集でCisco練習テスト [Q37-Q61]

[2025年11月27日] あなたを合格させる350-701無料最新問題集でCisco練習テスト

無料でゲット！高評価Cisco 350-701試験問題集を今すぐダウンロード！

シスコ350-701試験は、Implementing and Operating Cisco Security Core Technologiesとしても知られ、シスコセキュリティテクノロジーの実装と運用に関する知識とスキルを測定するプロフェッショナルレベルの認定試験です。これは、ネットワークセキュリティソリューションの実装と管理におけるセキュリティ専門家の専門知識を検証するために設計されたシスコ認定ネットワークプロフェッショナル（CCNP）セキュリティ認定プログラムの一部です。

質問 # 37
Refer to the exhibit.

What does the API do when connected to a Cisco security appliance?

A. get the process and PID information from the computers in the network
B. create an SNMP pull mechanism for managing AMP
C. gather the network interface information about the computers AMP sees
D. gather network telemetry information from AMP for endpoints

正解：C

解説：
The call to API of "https://api.amp.cisco.com/v1/computers" allows us to fetch list of computers across your organization that Advanced Malware Protection (AMP) sees. Reference: https://api-docs.amp.cisco.com/api_actions/details?api_action=GET+%2Fv1% 2Fcomputers&api_host=api.apjc.amp.cisco.com&api_resource=Computer&api_version=v1 Reference:
The call to API of "https://api.amp.cisco.com/v1/computers" allows us to fetch list of computers across your organization that Advanced Malware Protection (AMP) sees. Reference: https://api-docs.amp.cisco.com/api_actions/details?api_action=GET+%2Fv1% 2Fcomputers&api_host=api.apjc.amp.cisco.com&api_resource=Computer&api_version=v1

質問 # 38
What are two list types within AMP for Endpoints Outbreak Control? (Choose two)

A. simple custom detections
B. command and control
C. allowed applications
D. blocked ports
E. URL

正解：A、C

解説：
Explanation Advanced Malware Protection (AMP) for Endpoints offers a variety of lists, referred to as Outbreak Control, that allow you to customize it to your needs. The main lists are: Simple Custom Detections, Blocked Applications, Allowed Applications, Advanced Custom Detections, and IP Blocked and Allowed Lists. A Simple Custom Detection list is similar to a blocked list. These are files that you want to detect and quarantine. Allowed applications lists are for files you never want to convict. Some examples are a custom application that is detected by a generic engine or a standard image that you use throughout the company Reference: https://docs.amp.cisco.com/AMP%20for%20Endpoints%20User%20Guide.pdf Advanced Malware Protection (AMP) for Endpoints offers a variety of lists, referred to as Outbreak Control, that allow you to customize it to your needs. The main lists are: Simple Custom Detections, Blocked Applications, Allowed Applications, Advanced Custom Detections, and IP Blocked and Allowed Lists.
A Simple Custom Detection list is similar to a blocked list. These are files that you want to detect and quarantine.
Explanation Advanced Malware Protection (AMP) for Endpoints offers a variety of lists, referred to as Outbreak Control, that allow you to customize it to your needs. The main lists are: Simple Custom Detections, Blocked Applications, Allowed Applications, Advanced Custom Detections, and IP Blocked and Allowed Lists. A Simple Custom Detection list is similar to a blocked list. These are files that you want to detect and quarantine. Allowed applications lists are for files you never want to convict. Some examples are a custom application that is detected by a generic engine or a standard image that you use throughout the company Reference: https://docs.amp.cisco.com/AMP%20for%20Endpoints%20User%20Guide.pdf

質問 # 39
Which two request of REST API are valid on the Cisco ASA Platform? (Choose two)

A. connect
B. push
C. options
D. put
E. get

正解：D、E

解説：
ExplanationThe ASA REST API gives you programmatic access to managing individual ASAs through a Representational State Transfer (REST) API. The API allows external clients to perform CRUD (Create, Read, Update, Delete) operations on ASA resources; it is based on the HTTPS protocol and REST methodology.All API requests are sent over HTTPS to the ASA, and a response is returned.Request StructureAvailable request methods are:GET - Retrieves data from the specified object.PUT - Adds the supplied information to the specified object; returns a 404 Resource Not Found error if the object does not exist.POST - Creates the object with the supplied information.DELETE - Deletes the specified object Reference: https://www.cisco.com/c/en/us/td/docs/security/asa/api/qsg-asa-api.html

質問 # 40
Which policy does a Cisco Secure Web Appliance use to block or monitor URL requests based on the reputation score?

A. Encryption
B. Enforcement Security
C. Outbound Malware Scanning
D. Cisco Data Security

正解：B

質問 # 41
Which two methods are available in Cisco Secure Web Appliance to process client requests when configured in Transparent mode? (Choose two.)

A. Browser settings
B. WPAD
C. PBR
D. PAC files
E. WCCP

正解：C、E

質問 # 42
Drag and drop the steps from the left into the correct order on the right to enable AppDynamics to monitor an EC2 instance in Amazon Web Services.

正解：

解説：

質問 # 43
Which flaw does an attacker leverage when exploiting SQL injection vulnerabilities?

A. database
B. Linux and Windows operating systems
C. web page images
D. user input validation in a web page or web application

正解：D

質問 # 44
Drag and drop the threats from the left onto examples of that threat on the right

正解：

解説：

Explanation:

ExplanationA data breach is the intentional or unintentional release of secure or private/confidential information to anuntrusted environment.When your credentials have been compromised, it means someone other than you may be in possession of your account information, such as your username and/or password.

質問 # 45
Which algorithm provides encryption and authentication for data plane communication?

A. SHA-96
B. AES-256
C. SHA-384
D. AES-GCM

正解：D

解説：
The data plane of any network is responsible for handling data packets that are transported across the network.
(The data plane is also sometimes called the forwarding plane.)
Maybe this Qwants to ask about the encryption and authentication in the data plane of a SD-WAN network (but SD-WAN is not a topic of the SCOR 350-701 exam?).
In the Cisco SD-WAN network for unicast traffic, data plane encryption is done by AES-256-GCM, a symmetrickey algorithm that uses the same key to encrypt outgoing packets and to decrypt incoming packets. Each router periodically generates an AES key for its data path (specifically, one key per TLOC) and transmits this key to the vSmart controller in OMP route packets, which are similar to IP route updates.
The data plane of any network is responsible for handling data packets that are transported across the network.
(The data plane is also sometimes called the forwarding plane.)
Maybe this Qwants to ask about the encryption and authentication in the data plane of a SD-WAN network (but SD-WAN is not a topic of the SCOR 350-701 exam?).
In the Cisco SD-WAN network for unicast traffic, data plane encryption is done by AES-256-GCM, a symmetrickey algorithm that uses the same key to encrypt outgoing packets and to decrypt incoming packets. Each router periodically generates an AES key for its data path (specifically, one key per TLOC) and transmits this key to the vSmart controller in OMP route packets, which are similar to IP route updates.
Reference:
The data plane of any network is responsible for handling data packets that are transported across the network.
(The data plane is also sometimes called the forwarding plane.)
Maybe this Qwants to ask about the encryption and authentication in the data plane of a SD-WAN network (but SD-WAN is not a topic of the SCOR 350-701 exam?).
In the Cisco SD-WAN network for unicast traffic, data plane encryption is done by AES-256-GCM, a symmetrickey algorithm that uses the same key to encrypt outgoing packets and to decrypt incoming packets. Each router periodically generates an AES key for its data path (specifically, one key per TLOC) and transmits this key to the vSmart controller in OMP route packets, which are similar to IP route updates.

質問 # 46
Refer to the exhibit.

Traffic is not passing through IPsec site-to-site VPN on the Firepower Threat Defense appliance. What is causing this issue?

A. No split-tunnel policy is defined on the Firepower Threat Defense appliance.
B. Site-to-site VPN preshared keys are mismatched.
C. Site-to-site VPN peers are using different encryption algorithms.
D. The access control policy is not allowing VPN traffic in.

正解：A

解説：
Explanation:
If sysopt permit-vpn is not enabled then an access control policy must be created to allow the VPN traffic through the FTD device. If sysopt permit-vpn is enabled skip creating an access control policy.
Reference: https://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-negotiation-ike-protocols/215470- site-to-site-vpn-configuration-on-ftd-ma.html

質問 # 47
What is the benefit of integrating Cisco ISE with a MDM solution?

A. It provides compliance checks for access to the network
B. It provides the ability to update other applications on the mobile device
C. It provides the ability to add applications to the mobile device through Cisco ISE
D. It provides network device administration access

正解：A

解説：
https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ISE_admin_guide_24/ m_ise_interoperability_mdm.html
https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ISE_admin_guide_24/
https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ISE_admin_guide_24/ m_ise_interoperability_mdm.html

質問 # 48
Based on the NIST 800-145 guide, which cloud architecture is provisioned for exclusive use by a specific group of consumers from different organizations and may be owned, managed, and operated by one or more of those organizations?

A. private cloud
B. public cloud
C. hybrid cloud
D. community cloud

正解：D

質問 # 49
Which technology must be used to implement secure VPN connectivity among company branches over a private IP cloud with any-to-any scalable connectivity?

A. FlexVPN
B. IPsec DVTI
C. DMVPN
D. GET VPN

正解：D

質問 # 50
Based on the NIST 800-145 guide, which cloud architecture may be owned, managed, and operated by one or more of the organizations in the community, a third party, or some combination of them, and it may exist on or off premises?

A. private cloud
B. public cloud
C. hybrid cloud
D. community cloud

正解：D

解説：
According to the NIST 800-145 guide1, a community cloud is a cloud infrastructure that is provisioned for exclusive use by a specific community of consumers from organizations that have shared concerns (e.g., mission, security requirements, policy, and compliance considerations). It may be owned, managed, and operated by one or more of the organizations in the community, a third party, or some combination of them, and it may exist on or off premises. A community cloud is different from a hybrid cloud, which is a composition of two or more distinct cloud infrastructures (private, community, or public) that remain unique entities, but are bound together by standardized or proprietary technology that enables data and application portability (e.g., cloud bursting for load balancing between clouds). A private cloud is a cloud infrastructure that is provisioned for exclusive use by a single organization comprising multiple consumers (e.g., business units). It may be owned, managed, and operated by the organization, a third party, or some combination of them, and it may exist on or off premises. A public cloud is a cloud infrastructure that is provisioned for open use by the general public. It may be owned, managed, and operated by a business, academic, or government organization, or some combination of them. It exists on the premises of the cloud provider. References := Some possible references are:
1: NIST SP 800-145, The NIST Definition of Cloud Computing, 1 2: Evaluation of Cloud Computing Services Based on NIST SP 800-145, 3 3: What Is Community Cloud? Definition, Architecture, Examples, and Best Practices, 6

質問 # 51
Which form of attack is launched using botnets?

A. EIDDOS
B. virus
C. DDOS
D. TCP flood

正解：C

解説：
Explanation
A botnet is a collection of internet-connected devices infected by malware that allow hackers to control them.
Cyber criminals use botnets to instigate botnet attacks, which include malicious activities such as credentials leaks, unauthorized access, data theft and DDoS attacks.

質問 # 52
Which form of attack is launched using botnets?

A. EIDDOS
B. virus
C. DDOS
D. TCP flood

正解：C

解説：
A botnet is a collection of internet-connected devices infected by malware that allow hackers to control them.
Cyber criminals use botnets to instigate botnet attacks, which include malicious activities such as credentials leaks, unauthorized access, data theft and DDoS attacks.

質問 # 53
Which suspicious pattern enables the Cisco Tetration platform to learn the normal behavior of users?

A. interesting file access
B. privilege escalation
C. user login suspicious behavior
D. file access from a different user

正解：C

質問 # 54
An engineer integrates Cisco FMC and Cisco ISE using pxGrid Which role is assigned for Cisco FMC?

A. server
B. client
C. publisher
D. controller

正解：C

質問 # 55
Which term describes when the Cisco Firepower downloads threat intelligence updates from Cisco Talos?

A. authoring
B. sharing
C. analysis
D. consumption

正解：D

解説：
Explanation:
... we will showcase Cisco Threat Intelligence Director (CTID) an exciting feature on Cisco's Firepower Management Center (FMC) product offering that automates the operationalization of threat intelligence. TID has the ability to consume threat intelligence via STIX over TAXII and allows uploads/downloads of STIX and simple blacklists. Reference: https://blogs.cisco.com/developer/automate-threat-intelligence-using-cisco- threat-intelligencedirector

質問 # 56
DRAG DROP
Drag and drop the capabilities from the left onto the correct technologies on the right.
Select and Place:

正解：

解説：

質問 # 57
Which system facilitates deploying microsegmentation and multi-tenancy services with a policy-based container?

A. Lambda
B. Contiv
C. SDLC
D. Docker

正解：B

解説：
Contiv is an open source container networking fabric that supports heterogeneous container deployments across virtual machines, bare-metal, and public or private clouds. Contiv facilitates deploying microsegmentation and multi-tenancy services with a policy-based container by allowing cloud architects and IT admins to create, manage, and enforce operational policies such as traffic isolation, bandwidth prioritization, latency requirements, and policies for L4-L7 network services. Contiv also integrates natively with Cisco infrastructure and provides consistent networking across any platform (Docker Swarm, Kubernetes, or OpenShift) and any networking backend (Layer 2, Layer 3, Overlays, or ACI mode)123. References := 1:
Introducing Contiv 1.0 - The Most Powerful Container Networking Fabric 2: contivpp 3: Contiv - GitHub

質問 # 58
Which Cisco security solution gives the most complete view of the relationships and evolution of Internet domains IPs, and flies, and helps to pinpoint attackers' infrastructures and predict future threat?

A. Cisco pxGrid
B. Cisco Secure Network Analytics
C. Cisco Secure Cloud Analytics
D. Cisco Umbrella Investigate

正解：D

解説：
Cisco Umbrella Investigate is a cloud-based service that provides interactive threat intelligence on domains, IPs, and files. It helps security analysts to uncover the attacker's infrastructure and predict future threats by analyzing the relationships and evolution of internet domains, IPs, and files. It also integrates with other Cisco security solutions, such as Cisco Secure Network Analytics, Cisco Secure Cloud Analytics, and Cisco pxGrid, to provide a holistic view of the network and cloud security posture. Cisco Umbrella Investigate is based on the data collected by Cisco Umbrella, which processes more than 620 billion DNS requests per day from over
190 countries. Cisco Umbrella Investigate uses statistical and machine learning models to automatically score and classify the data, and provides a risk score for each domain, IP, and file, along with the contributing factors and historical context. Cisco Umbrella Investigate also allows security analysts to query the data using a web-based console or an API, and to visualize the results using graphs, tables, and maps. Cisco Umbrella Investigate is the most complete and interactive threat intelligence solution that helps to prevent cyber attacks before they happen. References := Some possible references are:
* Cisco Umbrella Investigate
* Cyber Attack Prevention - Cisco Umbrella
* Cisco Umbrella Investigate - Cisco Umbrella

質問 # 59
A network administrator needs to find out what assets currently exist on the network. Third-party systems need to be able to feed host data into Cisco Firepower. What must be configured to accomplish this?

A. a File Analysis policy to send file data into Cisco Firepower
B. a Network Discovery policy to receive data from the host
C. a Threat Intelligence policy to download the data from the host
D. a Network Analysis policy to receive NetFlow data from the host

正解：B

解説：
You can configure discovery rules to tailor the discovery of host and application data to your needs.
The Firepower System can use data from NetFlow exporters to generate connection and discovery events, and to add host and application data to the network map.
A network analysis policy governs how traffic is decoded and preprocessed so it can be further evaluated, especially for anomalous traffic that might signal an intrusion attempt

質問 # 60
Drag and drop the threats from the left onto examples of that threat on the right