Accurate Hot Selling 350-701 Exam Dumps 2022 Newly Released
Get 100% Authentic Cisco 350-701 Dumps with Correct Answers
Cisco SCOR 350-701 Practice Test Questions, Cisco SCOR 350-701 Exam Practice Test Questions
Cisco 350-701 SCOR: Implementing and Operating Cisco Security Core Technologies is a qualifying exam associated with three certifications, namely CCIE Security, CCNP Security, and Cisco Certified Specialist – Security Core.
What Are the Tested Skills in 350-701 SCOR Certification Exam?
Candidates who want to get the passing score in the Cisco 350-701 SCOR exam should be ready to demonstrate that they have skills in the following domains:
- Security concepts
During preparation for this topic, the candidate will learn how to explain common threats against cloud and on-premises environments. Also, they will become skilled in comparing common security vulnerabilities and will no longer have any surprises when it comes to software bugs, weak passwords, or missing encryption. Another subtopic included here covers cryptography components functions as well as hashing, encryption, SSL, and IPsec functions. Besides, applicants will become proficient in interpreting basic Python scripts and explaining North and South Bound as well as DNAC APIs for network provisioning.
- Network security
Within this domain, examinees will show their ability to compare network security solutions and deployment models related to different network security solutions and architectures. They should also understand how NetFlow and Flexible NetFlow records, components, and capabilities work. During the training classes, they will learn how to properly implement segmentation, access control policies, and management options for security solutions. Also, they will discover how to configure AAA for network and device access. Another subtopic included here will be the configuration of secure network management and site-to-site VPN.
- Securing the Cloud
The candidates will learn how to identify security solutions that contribute to cloud environment performance. Also, the comparison between the customer and provider security responsibility is also handled in this section. Another subtopic is related to DevSecOps description and application implementation. Candidates will have to demonstrate that they know how to identify security capabilities and deployment models and also understand how to configure logging and monitoring methodology. Finally, the training courses focusing on this topic will teach them essential workload and application security concepts.
- Content security
Within this topic, examinees will become experienced in implementing capture methods and traffic redirection. Also, they will know how more about web proxy identity and authentication by utilizing the user identification tools. Components like ESA, CES, or WSA will be also described in this section. Another subtopic is dedicated to web and email security verification and configuration. Secure internet gateway and web security features configuration and verification are also handled here. Candidates will learn more about how Cisco Umbrella works and what are its benefits. Finally, they will configure and verify web security controls with the help of Cisco Umbrella features.
- Endpoint protection and detection
The fifth topic will take the candidates in the area of understanding how Endpoint Protection Platforms and Endpoint Detection and Response solutions work. Also, they will become skilled in handling antimalware solutions, antivirus, dynamic file analysis, and endpoint-sourced telemetry features configuration. Another subtopic included in this section talks about endpoint device management, multifactor authentication strategy, posture assessment solutions, and endpoint patching.
- Secure network access, visibility, and enforcement
Last but not least, candidates need to be proficient in using guest services, profiling, BYOD, and posture assessment tools. They need to understand what's involved in the network access with CoA, what are the device compliance benefits, and different exfiltration techniques. It is essential that examinees demonstrate that they know the benefits of network telemetry and different Cisco components and capabilities.
Who Should Take Cisco 350-701 Exam?
Test 350-701 is for those willing to discover more about how Cisco network security systems work and aiming to earn the Cisco Specialist – Security Core certification or any of the related higher-level certificates. Also, it covers network access and visibility and thus is ideal for network engineers and designers, as well as security engineers, system engineers, or network managers.
When it comes to prerequisites, the vendor doesn't have any mandatory conditions. However, it is important that the candidate has some prior experience using basic Cisco network security. Also, the understanding of networking fundamentals or consistent knowledge equivalent to Cisco CCNA is recommended.
NEW QUESTION 117
How does Cisco Advanced Phishing Protection protect users?
- A. It determines which identities are perceived by the sender
- B. It uses machine learning and real-time behavior analytics.
- C. It validates the sender by using DKIM.
- D. It utilizes sensors that send messages securely.
Answer: A
Explanation:
Explanation
https://www.cisco.com/c/dam/en/us/products/collateral/security/cloud-email-security/at-a-glance-c45-740894.pd
NEW QUESTION 118
Drag and drop the capabilities of Cisco Firepower versus Cisco AMP from the left into the appropriate category on the right.
Answer:
Explanation:
NEW QUESTION 119
Refer to the exhibit.
A network engineer is testing NTP authentication and realizes that any device synchronizes time with this router and that NTP authentication is not enforced What is the cause of this issue?
- A. The router was not rebooted after the NTP configuration updated.
- B. NTP authentication is not enabled.
- C. The hashing algorithm that was used was MD5. which is unsupported.
- D. The key was configured in plain text.
Answer: A
NEW QUESTION 120
When a next-generation endpoint security solution is selected for a company, what are two key deliverables that help justify the implementation? (Choose two.)
- A. signature-based endpoint protection on company endpoints
- B. email integration to protect endpoints from malicious content that is located in email
- C. macro-based protection to keep connected endpoints safe
- D. continuous monitoring of all files that are located on connected endpoints
- E. real-time feeds from global threat intelligence centers
Answer: D,E
NEW QUESTION 121
What is the difference between deceptive phishing and spear phishing?
- A. Deceptive phishing is an attacked aimed at a specific user in the organization who holds a C-level role.
- B. A spear phishing campaign is aimed at a specific person versus a group of people.
- C. Deceptive phishing hijacks and manipulates the DNS server of the victim and redirects the user to a false webpage.
- D. Spear phishing is when the attack is aimed at the C-level executives of an organization.
Answer: B
NEW QUESTION 122
Which exfiltration method does an attacker use to hide and encode data inside DNS requests and queries?
- A. DNS security
- B. DNSSEC
- C. DNSCrypt
- D. DNS tunneling
Answer: D
Explanation:
Explanation/Reference: https://learn-umbrella.cisco.com/cloud-security/dns-tunneling
NEW QUESTION 123
Which benefit is provided by ensuring that an endpoint is compliant with a posture policy configured in Cisco ISE?
- A. It allows CoA to be applied if the endpoint status is compliant.
- B. It allows the endpoint to authenticate with 802.1xor MAB.
- C. It verifies that the endpoint has the latest Microsoft security patches installed.
- D. It adds endpoints to identity groups dynamically.
Answer: C
NEW QUESTION 124
What is a key difference between Cisco Firepower and Cisco ASA?
- A. Cisco Firepower provides identity-based access control while Cisco ASA does not.
- B. Cisco ASA provides SSL inspection while Cisco Firepower does not.
- C. Cisco ASA provides access control while Cisco Firepower does not.
- D. Cisco Firepower natively provides intrusion prevention capabilities while Cisco ASA does not.
Answer: D
Explanation:
https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-firepowerservices/200451-Configure-Intrusion-Policy-and-Signature.html
NEW QUESTION 125
What is a benefit of performing device compliance?
- A. Providing attribute-driven policies
- B. Verification of the latest OS patches
- C. Device classification and authorization
- D. Providing multi-factor authentication
Answer: B
NEW QUESTION 126
What is a prerequisite when integrating a Cisco ISE server and an AD domain?
- A. Place the Cisco ISE server and the AD server in the same subnet
- B. Synchronize the clocks of the Cisco ISE server and the AD server
- C. Configure a common DNS server
- D. Configure a common administrator account
Answer: B
Explanation:
The following are the prerequisites to integrate Active Directory with Cisco ISE.
+ Use the Network Time Protocol (NTP) server settings to synchronize the time between the Cisco ISE server and Active Directory. You can configure NTP settings from Cisco ISE CLI.
+ If your Active Directory structure has multidomain forest or is divided into multiple forests, ensure that trust relationships exist between the domain to which Cisco ISE is connected and the other domains that have user and machine information to which you need access. For more information on establishing trust relationships, refer to Microsoft Active Directory documentation.
+ You must have at least one global catalog server operational and accessible by Cisco ISE, in the domain to which you are joining Cisco ISE.
The following are the prerequisites to integrate Active Directory with Cisco ISE.
+ Use the Network Time Protocol (NTP) server settings to synchronize the time between the Cisco ISE server and Active Directory. You can configure NTP settings from Cisco ISE CLI.
+ If your Active Directory structure has multidomain forest or is divided into multiple forests, ensure that trust relationships exist between the domain to which Cisco ISE is connected and the other domains that have user and machine information to which you need access. For more information on establishing trust relationships, refer to Microsoft Active Directory documentation.
+ You must have at least one global catalog server operational and accessible by Cisco ISE, in the domain to which you are joining Cisco ISE.
Reference:
b_ISE_AD_integration_2x.html#reference_8DC463597A644A5C9CF5D582B77BB24F The following are the prerequisites to integrate Active Directory with Cisco ISE.
+ Use the Network Time Protocol (NTP) server settings to synchronize the time between the Cisco ISE server and Active Directory. You can configure NTP settings from Cisco ISE CLI.
+ If your Active Directory structure has multidomain forest or is divided into multiple forests, ensure that trust relationships exist between the domain to which Cisco ISE is connected and the other domains that have user and machine information to which you need access. For more information on establishing trust relationships, refer to Microsoft Active Directory documentation.
+ You must have at least one global catalog server operational and accessible by Cisco ISE, in the domain to which you are joining Cisco ISE.
b_ISE_AD_integration_2x.html#reference_8DC463597A644A5C9CF5D582B77BB24F
NEW QUESTION 127
Which attack is preventable by Cisco ESA but not by the Cisco WSA?
- A. phishing
Explanation
The following are the benefits of deploying Cisco Advanced Phishing Protection on the Cisco Email Security Gateway:
Prevents the following:
+ Attacks that use compromised accounts and social engineering.
+ Phishing, ransomware, zero-day attacks and spoofing.
+ BEC with no malicious payload or URL. - B. buffer overflow
- C. SQL injection
- D. DoS
Answer: A
Explanation:
Reference:
/b_ESA_Admin_Guide_13-5/m_advanced_phishing_protection.html
NEW QUESTION 128
Which policy represents a shared set of features or parameters that define the aspects of a managed device that are likely to be similar to other managed devices in a deployment?
- A. Access Control Policy
- B. Device Management Policy
- C. Platform Service Policy
- D. Group Policy
Answer: C
Explanation:
Explanation Cisco Firepower deployments can take advantage of platform settings policies. A platform settings policy is a shared set of features or parameters that define the aspects of a managed device that are likely to be similar to other managed devices in your deployment, such as time settings and external authentication. Examples of these platform settings policies are time and date settings, external authentication, and other common administrative features. A shared policy makes it possible to configure multiple managed devices at once, which provides consistency in your deployment and streamlines your management efforts. Any changes to a platform settings policy affects all the managed devices where you applied the policy. Even if you want different settings per device, you must create a shared policy and apply it to the desired device. For example, your organization's security policies may require that your appliances have a "No Unauthorized Use" message when a user logs in. With platform settings, you can set the login banner once in a platform settings policy. Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-configguide-v62/platform_settings_policies_for_managed_devices.html Therefore the answer should be "Platform Settings Policy", not "Platform Service Policy" but it is the best answer here so we have to choose it.
Cisco Firepower deployments can take advantage of platform settings policies. A platform settings policy is a shared set of features or parameters that define the aspects of a managed device that are likely to be similar to other managed devices in your deployment, such as time settings and external authentication. Examples of these platform settings policies are time and date settings, external authentication, and other common administrative features.
A shared policy makes it possible to configure multiple managed devices at once, which provides consistency in your deployment and streamlines your management efforts. Any changes to a platform settings policy affects all the managed devices where you applied the policy. Even if you want different settings per device, you must create a shared policy and apply it to the desired device.
For example, your organization's security policies may require that your appliances have a "No Unauthorized Use" message when a user logs in. With platform settings, you can set the login banner once in a platform settings policy.
Reference:
Therefore the answer should be "Platform Settings Policy", not "Platform Service Policy" but it is the best Explanation Cisco Firepower deployments can take advantage of platform settings policies. A platform settings policy is a shared set of features or parameters that define the aspects of a managed device that are likely to be similar to other managed devices in your deployment, such as time settings and external authentication. Examples of these platform settings policies are time and date settings, external authentication, and other common administrative features. A shared policy makes it possible to configure multiple managed devices at once, which provides consistency in your deployment and streamlines your management efforts. Any changes to a platform settings policy affects all the managed devices where you applied the policy. Even if you want different settings per device, you must create a shared policy and apply it to the desired device. For example, your organization's security policies may require that your appliances have a "No Unauthorized Use" message when a user logs in. With platform settings, you can set the login banner once in a platform settings policy. Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-configguide-v62/platform_settings_policies_for_managed_devices.html Therefore the answer should be "Platform Settings Policy", not "Platform Service Policy" but it is the best answer here so we have to choose it.
NEW QUESTION 129
A Cisco ESA administrator has been tasked with configuring the Cisco ESA to ensure there are no viruses before quarantined emails are delivered. In addition, delivery of mail from known bad mail servers must be prevented Which two actions must be taken in order to meet these requirements? (Choose two.)
- A. Configure a recipient access table
- B. Use outbreak filters from SenderBase
- C. Deploy the Cisco ESA in the DMZ
- D. Enable a message tracking service
- E. Scan quarantined emails using AntiVirus signatures.
Answer: D
NEW QUESTION 130
What is a characteristic of a bridge group in ASA Firewall transparent mode?
- A. It has an IP address on its BVI interface and is used for management traffic
- B. It includes multiple interfaces and access rules between interfaces are customizable
- C. It allows ARP traffic with a single access rule
- D. It is a Layer 3 segment and includes one port and customizable access rules
Answer: B
Explanation:
Explanation Explanation A bridge group is a group of interfaces that the ASA bridges instead of routes. Bridge groups are only supported in Transparent Firewall Mode. Like any other firewall interfaces, access control between interfaces is controlled, and all of the usual firewall checks are in place. Each bridge group includes a Bridge Virtual Interface (BVI). The ASA uses the BVI IP address as the source address for packets originating from the bridge group. The BVI IP address must be on the same subnet as the bridge group member interfaces. The BVI does not support traffic on secondary networks; only traffic on the same network as the BVI IP address is supported. You can include multiple interfaces per bridge group. If you use more than 2 interfaces per bridge group, you can control communication between multiple segments on the same network, and not just between inside and outside. For example, if you have three inside segments that you do not want to communicate with each other, you can put each segment on a separate interface, and only allow them to communicate with the outside interface. Or you can customize the access rules between interfaces to allow only as much access as desired. Reference: https://www.cisco.com/c/en/us/td/docs/security/asa/asa95/configuration/general/asa-95-generalconfig/intro-fw.html Note: BVI interface is not used for management purpose. But we can add a separate Management slot/port interface that is not part of any bridge group, and that allows only management traffic to the ASA.
Explanation
A bridge group is a group of interfaces that the ASA bridges instead of routes. Bridge groups are only supported in Transparent Firewall Mode. Like any other firewall interfaces, access control between interfaces is controlled, and all of the usual firewall checks are in place.
Each bridge group includes a Bridge Virtual Interface (BVI). The ASA uses the BVI IP address as the source address for packets originating from the bridge group. The BVI IP address must be on the same subnet as the bridge group member interfaces. The BVI does not support traffic on secondary networks; only traffic on the same network as the BVI IP address is supported.
You can include multiple interfaces per bridge group. If you use more than 2 interfaces per bridge group, you can control communication between multiple segments on the same network, and not just between inside and outside. For example, if you have three inside segments that you do not want to communicate with each other, you can put each segment on a separate interface, and only allow them to communicate with the outside interface. Or you can customize the access rules between interfaces to allow only as much access as desired.
Reference:
Explanation Explanation A bridge group is a group of interfaces that the ASA bridges instead of routes. Bridge groups are only supported in Transparent Firewall Mode. Like any other firewall interfaces, access control between interfaces is controlled, and all of the usual firewall checks are in place. Each bridge group includes a Bridge Virtual Interface (BVI). The ASA uses the BVI IP address as the source address for packets originating from the bridge group. The BVI IP address must be on the same subnet as the bridge group member interfaces. The BVI does not support traffic on secondary networks; only traffic on the same network as the BVI IP address is supported. You can include multiple interfaces per bridge group. If you use more than 2 interfaces per bridge group, you can control communication between multiple segments on the same network, and not just between inside and outside. For example, if you have three inside segments that you do not want to communicate with each other, you can put each segment on a separate interface, and only allow them to communicate with the outside interface. Or you can customize the access rules between interfaces to allow only as much access as desired. Reference: https://www.cisco.com/c/en/us/td/docs/security/asa/asa95/configuration/general/asa-95-generalconfig/intro-fw.html Note: BVI interface is not used for management purpose. But we can add a separate Management slot/port interface that is not part of any bridge group, and that allows only management traffic to the ASA.
NEW QUESTION 131
What is a difference between FlexVPN and DMVPN?
- A. DMVPN uses IKEv1 or IKEv2, FlexVPN only uses IKEv1
- B. DMVPN uses only IKEv1 FlexVPN uses only IKEv2
- C. FlexVPN uses IKEv1 or IKEv2, DMVPN uses only IKEv2
- D. FlexVPN uses IKEv2, DMVPN uses IKEv1 or IKEv2
Answer: D
NEW QUESTION 132
Which ASA deployment mode can provide separation of management on a shared appliance?
- A. DMZ multiple zone mode
- B. transparent firewall mode
- C. multiple context mode
- D. routed mode
Answer: C
NEW QUESTION 133
Refer to the exhibit.
An organization is using DHCP Snooping within their network. A user on VLAN 41 on a new switch is complaining that an IP address is not being obtained. Which command should be configured on the switch interface in order to provide the user with network connectivity?
- A. ip dhcp snooping limit 41
- B. ip dhcp snooping vlan 41
- C. ip dhcp snooping verify mac-address
- D. ip dhcp snooping trust
Answer: D
Explanation:
Explanation
Explanation
To understand DHCP snooping we need to learn about DHCP spoofing attack first.
DHCP spoofing is a type of attack in that the attacker listens for DHCP Requests from clients and answers them with fake DHCP Response before the authorized DHCP Response comes to the clients. The fake DHCP Response often gives its IP address as the client default gateway -> all the traffic sent from the client will go through the attacker computer, the attacker becomes a "man-in-the-middle".
The attacker can have some ways to make sure its fake DHCP Response arrives first. In fact, if the attacker is "closer" than the DHCP Server then he doesn't need to do anything. Or he can DoS the DHCP Server so that it can't send the DHCP Response.
DHCP snooping can prevent DHCP spoofing attacks. DHCP snooping is a Cisco Catalyst feature that determines which switch ports can respond to DHCP requests. Ports are identified as trusted and untrusted.
Only ports that connect to an authorized DHCP server are trusted, and allowed to send all types of DHCP messages. All other ports on the switch are untrusted and can send only DHCP requests. If a DHCP response is seen on an untrusted port, the port is shut down.
The port connected to a DHCP server should be configured as trusted port with the "ip dhcp snooping trust" command. Other ports connecting to hosts are untrusted ports by default.
In this question, we need to configure the uplink to "trust" (under interface Gi1/0/1) as shown below.
NEW QUESTION 134
Drag and drop the common security threats from the left onto the definitions on the right.
Answer:
Explanation:
NEW QUESTION 135
Refer to the exhibit.
What will happen when this Python script is run?
- A. The compromised computers and malware trajectories will be received from Cisco AMP
- B. The compromised computers and what compromised them will be received from Cisco AMP
- C. The list of computers, policies, and connector statuses will be received from Cisco AMP
- D. The list of computers and their current vulnerabilities will be received from Cisco AMP
Answer: C
Explanation:
Explanation Explanation The call to API of "https://api.amp.cisco.com/v1/computers" allows us to fetch list of computers across your organization that Advanced Malware Protection (AMP) sees Reference: https://api-docs.amp.cisco.com/api_actions/details?api_action=GET+%2Fv1% 2Fcomputers&api_host=api.apjc.amp.cisco.com&api_resource=Computer&api_version=v1 Explanation The call to API of "https://api.amp.cisco.com/v1/computers" allows us to fetch list of computers across your organization that Advanced Malware Protection (AMP) sees Reference:
Explanation Explanation The call to API of "https://api.amp.cisco.com/v1/computers" allows us to fetch list of computers across your organization that Advanced Malware Protection (AMP) sees Reference: https://api-docs.amp.cisco.com/api_actions/details?api_action=GET+%2Fv1% 2Fcomputers&api_host=api.apjc.amp.cisco.com&api_resource=Computer&api_version=v1
NEW QUESTION 136
Which product allows Cisco FMC to push security intelligence observable to its sensors from other products?
- A. Encrypted Traffic Analytics
- B. Cisco Talos Intelligence
- C. Threat Intelligence Director
- D. Cognitive Threat Analytics
Answer: C
Explanation:
Explanation
https://www.cisco.com/c/en/us/support/docs/storage-networking/security/214859-configure-and-troubleshoot-cis
NEW QUESTION 137
Which feature enables a Cisco ISR to use the default bypass list automatically for web filtering?
- A. filters
- B. group key
- C. company key
- D. connector
Answer: D
NEW QUESTION 138
What are two features of NetFlow flow monitoring? (Choose two)
- A. Copies all ingress flow information to an interface
- B. Does not required packet sampling on interfaces
- C. Can track ingress and egress information
- D. Can be used to track multicast, MPLS, or bridged traffic
- E. Include the flow record and the flow importer
Answer: C,D
Explanation:
The following are restrictions for Flexible NetFlow: + Traditional NetFlow (TNF) accounting is not supported. + Flexible NetFlow v5 export format is not supported, only NetFlow v9 export format is supported. + Both ingress and egress NetFlow accounting is supported. + Microflow policing feature shares the NetFlow hardware resource with FNF. + Only one flow monitor per interface and per direction is supported. Reference: https://www.cisco.com/en/US/docs/switches/lan/catalyst3850/software/release/3se/ consolidated_guide/b_consolidated_3850_3se_cg_chapter_011010.html When configuring NetFlow, follow these guidelines and restrictions: + Except in PFC3A mode, NetFlow supports bridged IP traffic. PFC3A mode does not support NetFlow bridged IP traffic. + NetFlow supports multicast IP traffic. Reference: https://www.cisco.com/en/US/docs/general/Test/dwerblo/broken_guide/netflow.html The Flexible NetFlow - MPLS Egress NetFlow feature allows you to capture IP flow information for packets that arrive on a router as Multiprotocol Label Switching (MPLS) packets and are transmitted as IP packets. This feature allows you to capture the MPLS VPN IP flows that are traveling through the service provider backbone from one site of a VPN to another site of the same VPN Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/netflow/configuration/15-mt/nf-15-mt-book/cfgmpls-netflow.html
+ Traditional NetFlow (TNF) accounting is not supported.
+ Flexible NetFlow v5 export format is not supported, only NetFlow v9 export format is supported.
+ Both ingress and egress NetFlow accounting is supported.
+ Microflow policing feature shares the NetFlow hardware resource with FNF.
+ Only one flow monitor per interface and per direction is supported.
Reference:
consolidated_guide/b_consolidated_3850_3se_cg_chapter_011010.html
When configuring NetFlow, follow these guidelines and restrictions:
+ Except in PFC3A mode, NetFlow supports bridged IP traffic. PFC3A mode does not support NetFlow bridged IP traffic.
+ NetFlow supports multicast IP traffic.
The Flexible NetFlow - MPLS Egress NetFlow feature allows you to capture IP flow information for packets that arrive on a router as Multiprotocol Label Switching (MPLS) packets and are transmitted as IP packets. This feature allows you to capture the MPLS VPN IP flows that are traveling through the service provider backbone from one site of a VPN to another site of the same VPN The following are restrictions for Flexible NetFlow: + Traditional NetFlow (TNF) accounting is not supported. + Flexible NetFlow v5 export format is not supported, only NetFlow v9 export format is supported. + Both ingress and egress NetFlow accounting is supported. + Microflow policing feature shares the NetFlow hardware resource with FNF. + Only one flow monitor per interface and per direction is supported. Reference: https://www.cisco.com/en/US/docs/switches/lan/catalyst3850/software/release/3se/ consolidated_guide/b_consolidated_3850_3se_cg_chapter_011010.html When configuring NetFlow, follow these guidelines and restrictions: + Except in PFC3A mode, NetFlow supports bridged IP traffic. PFC3A mode does not support NetFlow bridged IP traffic. + NetFlow supports multicast IP traffic. Reference: https://www.cisco.com/en/US/docs/general/Test/dwerblo/broken_guide/netflow.html The Flexible NetFlow - MPLS Egress NetFlow feature allows you to capture IP flow information for packets that arrive on a router as Multiprotocol Label Switching (MPLS) packets and are transmitted as IP packets. This feature allows you to capture the MPLS VPN IP flows that are traveling through the service provider backbone from one site of a VPN to another site of the same VPN Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/netflow/configuration/15-mt/nf-15-mt-book/cfgmpls-netflow.html
NEW QUESTION 139
A customer has various external HTTP resources available including Intranet Extranet and Internet, with a proxy configuration running in explicit mode. Which method allows the client desktop browsers to be configured to select when to connect direct or when to use the proxy?
- A. PAC file
- B. Forward file
- C. Bridge mode
- D. Transport mode
Answer: D
NEW QUESTION 140
......
Dumps of 350-701 Cover all the requirements of the Real Exam: https://www.exams-boost.com/350-701-valid-materials.html
New Training Course 350-701 Tutorial Preparation Guide: https://drive.google.com/open?id=1Z7jICQ21JBmvck2l1WxqrpmeVBoQK-zI