350-701 Exam dumps PDF | Exam-Dumps.net (Page: 12)

QUESTION: 56 Exam Topic: 1, Exam Pool A

Refer to the exhibit.

What is a result of the configuration?

Traffic from the DMZ network is redirected
Traffic from the inside network is redirected
All TCP traffic is redirected
Traffic from the inside and DMZ networks is redirected

Answer(s): D

Explanation:

The purpose of above commands is to redirect traffic that matches the ACL "redirect-acl" to the Cisco FirePOWER (SFR) module in the inline (normal) mode. In this mode, after the undesired traffic is dropped and any other actions that are applied by policy are performed, the traffic is returned to the ASA for further processing and ultimate transmission.

The command "service-policy global_policy global" applies the policy to all of the interfaces.

Reference:

https://www.cisco.com/c/en/us/support/docs/security/asa-firepower-services/118644- configurefirepower-00.html

Reveal Solution Next Question

QUESTION: 57 Exam Topic: 1, Exam Pool A

Which policy represents a shared set of features or parameters that define the aspects of a managed device that are likely to be similar to other managed devices in a deployment?

Group Policy
Access Control Policy
Device Management Policy
Platform Service Policy

Answer(s): D

Explanation:

Cisco Firepower deployments can take advantage of platform settings policies. A platform settings policy is a shared set of features or parameters that define the aspects of a managed device that are likely to be similar to other managed devices in your deployment, such as time settings and external authentication. Examples of these platform settings policies are time and date settings, external authentication, and other common administrative features.
A shared policy makes it possible to configure multiple managed devices at once, which provides consistency in your deployment and streamlines your management efforts. Any changes to a platform settings policy affects all the managed devices where you applied the policy. Even if you want different settings per device, you must create a shared policy and apply it to the desired device. For example, your organization's security policies may require that your appliances have a "No Unauthorized Use" message when a user logs in. With platform settings, you can set the login banner once in a platform settings policy.

Reference:

https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc- configguide-v62/platform_settings_policies_for_managed_devices.html Therefore the answer should be "Platform Settings Policy", not "Platform Service Policy" but it is the best answer here so we have to choose it.

Reveal Solution Next Question

QUESTION: 58 Exam Topic: 1, Exam Pool A

Which two tasks allow NetFlow on a Cisco ASA 5500 Series firewall? (Choose two)

Enable NetFlow Version 9.
Create an ACL to allow UDP traffic on port 9996.
Apply NetFlow Exporter to the outside interface in the inbound direction.
Create a class map to match interesting traffic.
Define a NetFlow collector by using the flow-export command

Answer(s): C,E

Reveal Solution Next Question

QUESTION: 59 Exam Topic: 1, Exam Pool A

A mall provides security services to customers with a shared appliance. The mall wants separation of management on the shared appliance.
Which ASA deployment mode meets these needs?

routed mode
transparent mode
multiple context mode
multiple zone mode

Answer(s): C

Reveal Solution Next Question

QUESTION: 60 Exam Topic: 1, Exam Pool A

What is a characteristic of Firepower NGIPS inline deployment mode?

ASA with Firepower module cannot be deployed.
It cannot take actions such as blocking traffic.
It is out-of-band from traffic.
It must have inline interface pairs configured.

Answer(s): D

Reveal Solution Next Question

Cisco 350-701 Exam (page: 12) Cisco Implementing and Operating Security Core Technologies Updated on: 27-Feb-2026

QUESTION: 56 Exam Topic: 1, Exam Pool A

Explanation:

Reference:

QUESTION: 57 Exam Topic: 1, Exam Pool A

Explanation:

Reference:

QUESTION: 58 Exam Topic: 1, Exam Pool A

QUESTION: 59 Exam Topic: 1, Exam Pool A

QUESTION: 60 Exam Topic: 1, Exam Pool A

Cisco 350-701 Exam (page: 12)
Cisco Implementing and Operating Security Core Technologies
Updated on: 27-Feb-2026