Real IT Certification Exams Questions & Dumps | Get Certified with CertQuestionsBank.com

Latest 350-701 Exam Practice Questions

The practice questions for 350-701 exam was last updated on 2025-04-26 .

Viewing page 1 out of 44 pages.

Viewing questions 1 out of 223 questions.

Question#1

What is the purpose of the certificate signing request when adding a new certificate for a server?

A. It is the password for the certificate that is needed to install it with.

B. It provides the server information so a certificate can be created and signed

C. It provides the certificate client information so the server can authenticate against it when installing

D. It is the certificate that will be loaded onto the server

Explanation:
A certificate signing request (CSR) is one of the first steps towards getting your own SSL Certificate. Generated on the same server you plan to install the certificate on, the CSR contains information (e.g. common name, organization, country) that the Certificate Authority (CA) will use to create your certificate. It also contains the public key that will be included in your certificate and is signed with the corresponding private key

Question#2

What is a characteristic of an EDR solution and not of an EPP solution?

A. stops all ransomware attacks

B. retrospective analysis

C. decrypts SSL traffic for better visibility

D. performs signature-based detection

Question#3

An engineer is configuring Cisco Umbrella and has an identity that references two different policies.
Which action ensures that the policy that the identity must use takes precedence over the second one?

A. Configure the default policy to redirect the requests to the correct policy

B. Place the policy with the most-specific configuration last in the policy order

C. Configure only the policy with the most recently changed timestamp

D. Make the correct policy first in the policy order

Question#4

Which algorithm provides encryption and authentication for data plane communication?

A. AES-GCM

B. SHA-96

C. AES-256

D. SHA-384

Explanation:
The data plane of any network is responsible for handling data packets that are transported across the network.
(The data plane is also sometimes called the forwarding plane.)
Maybe this Qwants to ask about the encryption and authentication in the data plane of a SD-WAN network (but SD-WAN is not a topic of the SCOR 350-701 exam?).
In the Cisco SD-WAN network for unicast traffic, data plane encryption is done by AES-256-GCM, a symmetrickey algorithm that uses the same key to encrypt outgoing packets and to decrypt incoming packets. Each router periodically generates an AES key for its data path (specifically, one key per TLOC) and transmits this key to the vSmart controller in OMP route packets, which are similar to IP route updates.
Reference: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/security/vedge/security-book/security-overview.html

Question#5

An engineer is configuring 802.1X authentication on Cisco switches in the network and is using CoA as a mechanism.
Which port on the firewall must be opened to allow the CoA traffic to traverse the network?

A. TCP 6514

B. UDP 1700

C. TCP 49

D. UDP 1812

Explanation:
CoA Messages are sent on two different udp ports depending on the platform. Cisco standardizes on UDP port 1700, while the actual RFC calls out using UDP port 3799.

Exam Code: 350-701Q & A: 633 Q&AsUpdated: 2025-04-26

Get All 350-701 Q&As

350-701 Online Practice Questions

Question#1

Question#2

Question#3

Question#4

Question#5

Top 20 Exams

Important Links

Know Us

Follow Us