← Back to exam page

350-701 – Implementing and Operating Cisco Security Core Technologies

Loading demo links...

Showing 7–9 of 20 questions

Question 7 (New Update)

Which two parameters are used for device compliance checks? (Choose two.)

Select all that apply, then click Submit answer.

  • ○

    endpoint protection software version
  • ○

    Windows registry values
  • ○

    DHCP snooping checks
  • ○

    DNS integrity checks
  • ○

    device operating system version
Question 8 (New Update)

A company has 5000 Windows users on its campus. Which two precautions should IT take to prevent WannaCry ransomware from spreading to all clients? (Choose two.)

Select all that apply, then click Submit answer.

  • ○

    Segment different departments to different IP blocks and enable Dynamic ARp inspection on all VLANs
  • ○

    Ensure that noncompliant endpoints are segmented off to contain any potential damage.
  • ○

    Ensure that a user cannot enter the network of another department.
  • ○

    Perform a posture check to allow only network access to (hose Windows devices that are already patched.
  • ○

    Put all company users in the trusted segment of NGFW and put all servers to the DMZ segment of the Cisco NGFW. ni
Question 9 (Secure Network Access, Visibility, and Enforcement)

Which two actions does the Cisco Identity Services Engine posture module provide that ensures endpoint security? (Choose two.)

Select all that apply, then click Submit answer.

  • ○

    Assignments to endpoint groups are made dynamically, based on endpoint attributes.
  • ○

    Endpoint supplicant configuration is deployed.
  • ○

    A centralized management solution is deployed.
  • ○

    Patch management remediation is performed.
  • ○

    The latest antivirus updates are applied before access is allowed.