Cisco 350-701 SCOR Practice Questions - Page 15

The latest changes and updates from the administration for this exam.

verified

Latest Update: Jun 01 2026

All questions are working fine.

All Questions (299)bookmarkBookmarked (0)

All299Show all accessible questions in this exam.Missed299Questions you haven't attempted yet.Incorrect0Questions you answered incorrectly on your last attempt.

Question 141

An engineer is configuring their router to send NetfFow data to Stealthwatch which has an IP address of 1.1.1.1 using the flow record Stealthwatch406143794 command. Which additional command is required to complete the flow record?

cache timeout active 60

destination 1.1.1.1

match ipv4 ttl

transport udp 2055

Question 142

An engineer is adding a Cisco DUO solution to the current TACACS+ deployment using Cisco ISE. The engineer wants to authenticate users using their account when they log into network devices. Which action accomplishes this task?

Configure Cisco DUO with the external Active Directory connector and tie it to the policy set within Cisco ISE.

Install and configure the Cisco DUO Authentication Proxy and configure the identity source sequence within Cisco ISE.

Modify the current policy with the condition MFA: SourceSequence:DUO=true in the authorization conditions within Cisco ISE.

Create an identity policy within Cisco ISE to send all authentication requests to Cisco DUO.

Question 143

What is the function of the crypto isakmp key cisc406143794 address 0.0.0.0 0.0.0.0 command when establishing an IPsec VPN tunnel?

It prevents all IP addresses from connecting to the VPN server.

It configures the pre-shared authentication key.

It configures the local address for the VPN server.

It defines what data is going to be encrypted via the VPN.

Question 144

An administrator is adding a new switch onto the network and has configured AAA for network access control. When testing the configuration, the RADIUS authenticates to Cisco ISE but is being rejected. Why is the ip radius source-interface command needed for this configuration?

Only requests that originate from a configured NAS IP are accepted by a RADIUS server.

The RADIUS authentication key is transmitted only from the defined RADIUS source interface.

RADIUS requests are generated only by a router if a RADIUS source interface is defined.

Encrypted RADIUS authentication requires the RADIUS source interface be defined.

Question 145

Which statement about the configuration of Cisco ASA NetFlow v9 Secure Event Logging is true?

To view bandwidth usage for NetFlow records, the QoS feature must be enabled.

A sysopt command can be used to enable NSEL on a specific interface.

NSEL can be used without a collector configured.

A flow-export event type must be defined under a policy.

Question 146

Which feature requires a network discovery policy on the Cisco Firepower NGIPS?

security intelligence

impact flags

health monitoring

URL filtering

Question 147

Which policy is used to capture host information on the Cisco Firepower Next Generation Intrusion Prevention System?

correlation

intrusion

access control

network discovery

Question 148

What is a characteristic of traffic storm control behavior?

Traffic storm control drops all broadcast and multicast traffic if the combined traffic exceeds the level within the interval.

Traffic storm control cannot determine if the packet is unicast or broadcast.

Traffic storm control monitors incoming traffic levels over a 10-second traffic storm control interval.

Traffic storm control uses the Individual/Group bit in the packet source address to determine if the packet is unicast or broadcast.

Question 149

DRAG DROP -

Drag and drop the Firepower Next Generation Intrusion Prevention System detectors from the left onto the correct definitions on the right.

Select and Place:

Question 150

Refer to the exhibit. Which statement about the authentication protocol used in the configuration is true?

The authentication request contains only a password

The authentication request contains only a username

The authentication and authorization requests are grouped in a single packet.

There are separate authentication and authorization request packets.

Update History

Update History