Question 1

Why should organizations migrate to an MFA strategy for authentication?

Options :

A : Single methods of authentication can be compromised more easily than MFA

B : Biometrics authentication leads to the need for MFA due to its ability to be hacked easily

C : MFA methods of authentication are never compromised

D : MFA does not require any piece of evidence for an authentication mechanism.

Answer: A

Question 2

An engineer is trying to securely connect to a router and wants to prevent insecure algorithms from being used.
However, the connection is failing. Which action should be taken to accomplish this goal?

Options :

A : Disable telnet using the no ip telnet command.

B : Enable the SSH server using the ip ssh server command.

C : Configure the port using the ip ssh port 22 command.

D : Generate the RSA key using the crypto key generate rsa command.

Answer: D

Question 3

An organization wants to provide visibility and to identify active threats in its network using a VM. The
organization wants to extract metadata from network packet flow while ensuring that payloads are not retained
or transferred outside the network. Which solution meets these requirements?

Options :

A : Cisco Umbrella Cloud

B : Cisco Stealthwatch Cloud PNM

C : Cisco Stealthwatch Cloud PCM

D : Cisco Umbrella On-Premises

Answer: B

Question 4

An organization has two machines hosting web applications. Machine 1 is vulnerable to SQL injection while machine 2 is vulnerable to buffer overflows. What action would allow the attacker to gain access to machine 1 but not machine 2?

Options :

A : sniffing the packets between the two hosts

B : sending continuous pings

C : overflowing the buffer-s memory

D : inserting malicious commands into the database

Answer: D

Question 5

How does DNS Tunneling exfiltrate data?

Options :

A : An attacker registers a domain that a client connects to based on DNS records and sends malware through
that connection.

B : An attacker opens a reverse DNS shell to get into the client-s system and install malware on it.

C : An attacker uses a non-standard DNS port to gain access to the organization-s DNS servers in order to
poison the resolutions.

D : An attacker sends an email to the target with hidden DNS resolvers in it to redirect them to a malicious
domain.

Answer: A

Higher Test Marks with Free Online 350-701 Exam Practice

Buying Options: