Question 1

Which PKI enrollment method allows the user to separate authentication and enrollment actions and also
provides an option to specify HTTP/TFTP commands to perform file retrieval from the server?

Options :

A : url

B : terminal

C : profile

D : selfsigned

Answer: C

Question 2

An engineer is configuring Cisco WSA and needs to deploy it in transparent mode. Which configuration component must be used to accomplish this goal?

Options :

A : MDA on the router

B : PBR on Cisco WSA

C : WCCP on switch

D : DNS resolution on Cisco WSA

Answer: C

Question 3

Which Cisco Umbrella package supports selective proxy for Inspection of traffic from risky domains?

Options :

A : SIG Advantage

B : DNS Security Essentials

C : SIG Essentials

D : DNS Security Advantage

Answer: C

Question 4

Which network monitoring solution uses streams and pushes operational data to provide a near real-time view
of activity?

Options :

A : SNMP

B : SMTP

C : syslog

D : model-driven telemetry

Answer: D

Question 5

A Cisco ISE engineer configures Central Web Authentication (CWA) for wireless guest access and must have the guest endpoints redirect to the guest portal for authentication and authorization. While testing the policy, the engineer notices that the device is not redirected and instead gets full guest access. What must be done for the redirect to work?

Options :

A : Tag the guest portal in the CWA part of the Common Tasks section of the authorization profile for the authorization policy line that the unauthenticated devices hit.

B : Use the track movement option within the authorization profile for the authorization policy line that the unauthenticated devices hit.

C : Create an advanced attribute setting of Cisco:cisco-gateway-id=guest within the authorization profile for the authorization policy line that the unauthenticated devices hit.

D : Add the DACL name for the Airespace ACL configured on the WLC in the Common Tasks section of the authorization profile for the authorization policy line that the unauthenticated devices hit.

Answer: C

Higher Test Marks with Free Online 350-701 Exam Practice

Buying Options: