Question 1

Which two criteria must a certificate meet before the WSA uses it to decrypt application traffic? (Choose two.)

Options :

A : It must include the current date.

B : It must reside in the trusted store of the WSA.

C : It must reside in the trusted store of the endpoint.

D : It must have been signed by an internal CA.

E : it must contain a SAN.

Answer: A,B

Question 2

A network administrator is configuring SNMPv3 on a new router. The users have already been created;
however, an additional configuration is needed to facilitate access to the SNMP views. What must the
administrator do to accomplish this?

Options :

A : map SNMPv3 users to SNMP views

B : set the password to be used for SNMPv3 authentication

C : define the encryption algorithm to be used by SNMPv3

D : specify the UDP port used by SNMP

Answer: B

Question 3

Which ID store requires that a shadow user be created on Cisco ISE for the admin login to work?

Options :

A : RSA SecureID

B : Internal Database

C : Active Directory

D : LDAP

Answer: C

Question 4

Which feature requires that network telemetry be enabled?

Options :

A : per-interface stats

B : SNMP trap notification

C : Layer 2 device discovery

D : central syslog system

Answer: D

Question 5

Which two characteristics of messenger protocols make data exfiltration difficult to detect and prevent?
(Choose two)

Options :

A : Outgoing traffic is allowed so users can communicate with outside organizations.

B : Malware infects the messenger application on the user endpoint to send company data.

C : Traffic is encrypted, which prevents visibility on firewalls and IPS systems.

D : An exposed API for the messaging platform is used to send large amounts of data.

E : Messenger applications cannot be segmented with standard network controls

Answer: A,C

Higher Test Marks with Free Online 350-701 Exam Practice

Buying Options: