Loading demo links...
Showing 1–20 of 20 questions
Drag and drop the Cisco CWS redirection options from the left onto the capabilities on the right.
Answer is in the explanation below.
DRAG DROP
Drag and drop the steps from the left into the correct order on the right to enable Cisco AppDynamics to monitor an EC2 instance in AWS.
Select and Place:
Answer is in the explanation below.
What are two ways that Cisco Container Platform provides value to customers who utilize cloud service providers? (Choose two.)
Select all that apply, then click Submit answer.
Allows developers to create code once and deploy to multiple clouds
helps maintain source code for cloud deployments
manages Docker containers
manages Kubernetes clusters
Creates complex tasks for managing code
What are two ways a network administrator transparently identifies users using Active Directory on the Cisco WSA? (Choose two.)
Select all that apply, then click Submit answer.
Create an LDAP authentication realm and disable transparent user identification.
Create NTLM or Kerberos authentication realm and enable transparent user identification.
Deploy a separate Active Directory agent such as Cisco Context Directory Agent.
The eDirectory client must be installed on each client workstation.
Deploy a separate eDirectory server; the dent IP address is recorded in this server.
Select all that apply, then click Submit answer.
Have Cisco Prime Infrastructure issue an SNMP set command to re-enable the ports after the preconfigured interval.
Use EEM to have the ports return to service automatically in less than 300 seconds.
Enter the shutdown and no shutdown commands on the interfaces.
Enable the snmp-server enable traps command and wait 300 seconds
Ensure that interfaces are configured with the error-disable detection and recovery feature
What are two indications of the Cisco Firepower Services Module configuration?
(Choose two.)
Select all that apply, then click Submit answer.
The module is operating in IDS mode.
Traffic is blocked if the module fails.
The module fails to receive redirected traffic.
The module is operating in IPS mode.
Traffic continues to flow if the module fails.
Which two parameters are used for device compliance checks? (Choose two.)
Select all that apply, then click Submit answer.
endpoint protection software version
Windows registry values
DHCP snooping checks
DNS integrity checks
device operating system version
A company has 5000 Windows users on its campus. Which two precautions should IT take to prevent WannaCry ransomware from spreading to all clients? (Choose two.)
Select all that apply, then click Submit answer.
Segment different departments to different IP blocks and enable Dynamic ARp inspection on all VLANs
Ensure that noncompliant endpoints are segmented off to contain any potential damage.
Ensure that a user cannot enter the network of another department.
Perform a posture check to allow only network access to (hose Windows devices that are already patched.
Put all company users in the trusted segment of NGFW and put all servers to the DMZ segment of the Cisco NGFW. ni
Which two actions does the Cisco Identity Services Engine posture module provide that ensures endpoint security? (Choose two.)
Select all that apply, then click Submit answer.
Assignments to endpoint groups are made dynamically, based on endpoint attributes.
Endpoint supplicant configuration is deployed.
A centralized management solution is deployed.
Patch management remediation is performed.
The latest antivirus updates are applied before access is allowed.
What are two ways a network administrator transparently identifies users using Active Directory on the Cisco WSA? (Choose two.) The eDirectory client must be installed on each client workstation.
Select all that apply, then click Submit answer.
Create NTLM or Kerberos authentication realm and enable transparent user identification
Deploy a separate Active Directory agent such as Cisco Context Directory Agent.
Create an LDAP authentication realm and disable transparent user identification.
Deploy a separate eDirectory server: the client IP address is recorded in this server
Which two mechanisms are used to control phishing attacks? (Choose two.)
Select all that apply, then click Submit answer.
Enable browser alerts for fraudulent websites.
Define security group memberships.
Revoke expired CRL of the websites.
Use antispyware software.
Implement email filtering techniques.
Select an option, then click Submit answer.
the ability to see all traffic without requiring TLS decryption
visibility into IP-based threats by tunneling suspicious IP connections
the ability to dynamically categorize traffic to previously uncategorized sites
visibility into traffic that is destined to sites within the office environment
An engineer needs a cloud solution that will monitor traffic, create incidents based on events, and integrate withother cloud solutions via an API. Which solution should be used to accomplish this goal?
Select an option, then click Submit answer.
SIEM
CASB
Adaptive MFA
Cisco Cloudlock
Which type of attack is MFA an effective deterrent for?
Select an option, then click Submit answer.
ping of death
phishing
teardrop
syn flood
An engineer needs to add protection for data in transit and have headers in the email message Which configuration is needed to accomplish this goal?
Select an option, then click Submit answer.
Provision the email appliance
Deploy an encryption appliance.
Map sender !P addresses to a host interface.
Enable flagged message handling
Refer to the exhibit.
What does the API key do while working with https://api.amp.cisco.com/v1/computers?
Select an option, then click Submit answer.
displays client ID
HTTP authorization
Imports requests
HTTP authentication
An organization deploys multiple Cisco FTD appliances and wants to manage them using one centralizedsolution. The organization does not have a local VM but does have existing Cisco ASAs that must migrate overto Cisco FTDs. Which solution meets the needs of the organization?
Select an option, then click Submit answer.
Cisco FMC
CSM
Cisco FDM
CDO
What is the Cisco API-based broker that helps reduce compromises, application risks, and data breaches in an environment that is not on-premise?
Select an option, then click Submit answer.
Cisco AppDynamics
Cisco Cloudlock
Cisco Umbrella
Cisco AMP
An administrator is adding a new Cisco ISE node to an existing deployment. What must be done to ensure that the addition of the node will be successful when inputting the FQDN?
Select an option, then click Submit answer.
Change the IP address of the new Cisco ISE node to the same network as the others.
Make the new Cisco ISE node a secondary PAN before registering it with the primary.
Open port 8905 on the firewall between the Cisco ISE nodes.
Add the DNS entry for the new Cisco ISE node into the DNS server.
What is the term for having information about threats and threat actors that helps mitigate harmful events that would otherwise compromise networks or systems?
Select an option, then click Submit answer.
trusted automated exchange
Indicators of Compromise
The Exploit Database
threat intelligence
Prepare for the Implementing and Operating Cisco Security Core Technologies (SCOR 350-701) (350-701) exam with this free practice test from Study4Pass, built around the real Cisco syllabus. The 20 questions come free from the full 102-question Study4Pass practice set — a quick, honest check of where you stand. The free sample includes 9 single-answer, 9 multiple-answer and 2 drag-and-drop questions — the same mix of formats you will meet in the full set. The set follows the real exam’s spread of topics: Network Security, Network Automation, Infrastructure Services and Network Programmability. The Cisco 350-701 Implementing and Operating Cisco Security Core Technologies (SCOR) exam is a 120-minute exam associated with the CCNP Security, CCIE Security, and Cisco Certified Specialist - Security Core certifications.
The target audience for the Cisco 350-701 exam is individuals who are looking to pursue a career as an IT professional in the areas of network engineering, system engineering, and… The prerequisites for the Cisco 350-701 exam are a minimum of five years of experience with Cisco technologies, including Cisco enterprise routing and switching, Cisco network security, and Cisco network…
Work through the questions one at a time and read every explanation, even for the ones you get right — the reasoning behind an answer is what the real exam tests. If one area keeps costing you marks, you have found exactly what to revise before exam day.
Think of the result as a map, not a verdict. The questions you miss point straight at the topics that need work, and the explanations tell you why the correct option wins. Candidates who loop through that cycle — practise, review the reasoning, re-test — walk into the real exam having already seen their weak spots and fixed them.
Inside the full 350-701 practice set:
There is no clock and no account needed. Answer each question, check the result, and read the explanation before moving on. For anything that still feels unclear, Ask AI is built into this AI-Enabled practice test — it explains the concept behind the question so the next one like it gets easier. When the free sample feels comfortable, the full set of 102 questions adds timed Exam Simulation, topic-by-topic training, and flagged-question review — the closest thing to exam day you can get before the real thing.
Yes. Every question on this page — all 20 of them — is free to use, and you never need to create an account to try them.
The full Study4Pass set for 350-701 has 102 practice questions. This page gives you 20 of them free so you can judge the quality and difficulty first.
Yes. Check any question to reveal the correct answer and its explanation, and use Ask AI whenever you want the underlying concept explained step by step.
No — these are practice questions built to match the 350-701 domains and difficulty level, so you can prepare for the real exam with confidence.
