350-701 Exam AI-Powered | Exam-Dumps.net (Page: 11)

QUESTION: 51 Exam Topic: 1, Exam Pool A

Which statement about IOS zone-based firewalls is true?

An unassigned interface can communicate with assigned interfaces
Only one interface can be assigned to a zone.
An interface can be assigned to multiple zones.
An interface can be assigned only to one zone.

Answer(s): D

Reveal Solution Next Question

QUESTION: 52 Exam Topic: 1, Exam Pool A

What is a characteristic of Cisco ASA Netflow v9 Secure Event Logging?

It tracks flow-create, flow-teardown, and flow-denied events.
It provides stateless IP flow tracking that exports all records of a specific flow.
It tracks the flow continuously and provides updates every 10 seconds.
Its events match all traffic classes in parallel.

Answer(s): A

Explanation:

The ASA and ASASM implementations of NetFlow Secure Event Logging (NSEL) provide a stateful, IP flow tracking method that exports only those records that indicate significant events in a flow. The significant events that are tracked include flow-create, flow-teardown, and flow-denied (excluding those flows that are denied by EtherType ACLs).

Reference:

https://www.cisco.com/c/en/us/td/docs/security/asa/asa92/configuration/general/asa- general-cli/ monitor-nsel.html

Reveal Solution Next Question

QUESTION: 53 Exam Topic: 1, Exam Pool A

Which CLI command is used to register a Cisco FirePower sensor to Firepower Management Center?

configure system add <host><key>
configure manager <key> add host
configure manager delete
configure manager add <host><key

Answer(s): D

Reveal Solution Next Question

QUESTION: 54 Exam Topic: 1, Exam Pool A

Which policy is used to capture host information on the Cisco Firepower Next Generation Intrusion Prevention
System?

Correlation
Intrusion
Access Control
Network Discovery

Answer(s): D

Explanation:

The Firepower System uses network discovery and identity policies to collect host, application, and user data for traffic on your network. You can use certain types of discovery and identity data to build a comprehensive map of your network assets, perform forensic analysis, behavioral profiling, access control, and mitigate and respond to the vulnerabilities and exploits to which your organization is susceptible. You can configure your network discovery policy to perform host and application detection.

Reference:

https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc- configguide-v64/introduction_to_network_discovery_and_identity.html

Reveal Solution Next Question