350-701 Exam Dumps | An engineer used a posture check on a Microsoft Windows endpoint and discovered that the MS17-010 patch

Home
Cisco
Implementing and Operating Cisco Security Core Technologies
Cisco.350-701.v2022-03-17.q115
Question 14

Valid 350-701 Dumps shared by EduDump.com for Helping Passing 350-701 Exam! EduDump.com now offer the newest 350-701 exam dumps, the EduDump.com 350-701 exam questions have been updated and answers have been corrected get the newest EduDump.com 350-701 dumps with Test Engine here:

Access 350-701 Dumps Premium Version
(727 Q&As Dumps, 35%OFF Special Discount Code: freecram)

<< Prev Question Next Question >>

Question 14/115

An engineer used a posture check on a Microsoft Windows endpoint and discovered that the MS17-010 patch was not installed, which left the endpoint vulnerable to WannaCry ransomware. Which two solutions mitigate the risk of this ransom ware infection? (Choose two)

A. Configure a posture policy in Cisco Identity Services Engine to install the MS17-010 patch before allowing access on the network.

B. Set up a profiling policy in Cisco Identity Service Engine to check and endpoint patch level before allowing access on the network.

C. Configure a posture policy in Cisco Identity Services Engine to check that an endpoint patch level is met before allowing access on the network.

D. Configure endpoint firewall policies to stop the exploit traffic from being allowed to run and replicate throughout the network.

E. Set up a well-defined endpoint patching strategy to ensure that endpoints have critical vulnerabilities patched in a timely fashion.

Correct Answer: A,C

Explanation
A posture policy is a collection of posture requirements, which are associated with one or more identity groups, and operating systems. We can configure ISE to check for the Windows patch at Work Centers > Posture > Posture Elements > Conditions > File.
In this example, we are going to use the predefined file check to ensure that our Windows 10 clients have the critical security patch installed to prevent the Wanna Cry malware.

Your email address will not be published. Required fields are marked *

Comment: *

Name: *

Email: *

Rating: *

Verification: *

Question List (115q): Question 1: A network engineer is trying to figure out whether FlexVPN o...; Question 2: Which proxy mode must be used on Cisco WSA to redirect TCP t...; Question 3: What is a characteristic of Cisco ASA Netflow v9 Secure Even...; Question 4: An organization received a large amount of SPAM messages ove...; Question 5: What features does Cisco FTDv provide over ASAv?...; Question 6: An organization configures Cisco Umbrella to be used for its...; 1 commentQuestion 7: Drag and drop the VPN functions from the left onto the descr...; Question 8: Refer to the exhibit. (Exhibit) Which type of authentication...; Question 9: Drag and drop the Firepower Next Generation Intrusion Preven...; Question 10: How does Cisco Advanced Phishing Protection protect users?...; Question 11: An organization wants to secure users, data, and application...; Question 12: An organization wants to secure data in a cloud environment....; Question 13: Which two prevention techniques are used to mitigate SQL inj...; Question 14: An engineer used a posture check on a Microsoft Windows endp...; Question 15: Which two activities can be done using Cisco DNA Center? (Ch...; Question 16: In which form of attack is alternate encoding, such as hexad...; Question 17: What are two characteristics of Cisco DNA Center APIs? (Choo...; Question 18: Which two features are used to configure Cisco ESA with a mu...; Question 19: Where are individual sites specified to be blacklisted in Ci...; Question 20: Which risk is created when using an Internet browser to acce...; Question 21: Which group within Cisco writes and publishes a weekly newsl...; Question 22: What are two Detection and Analytics Engines of Cognitive Th...; Question 23: What is provided by the Secure Hash Algorithm in a VPN?...; Question 24: An organization deploys multiple Cisco FTD appliances and wa...; Question 25: Which algorithm provides encryption and authentication for d...; Question 26: Refer to the exhibit. (Exhibit) What is a result of the conf...; Question 27: In which type of attack does the attacker insert their machi...; Question 28: Which SNMPv3 configuration must be used to support the stron...; Question 29: Which attack type attempts to shut down a machine or network...; Question 30: Which benefit is provided by ensuring that an endpoint is co...; Question 31: An organization has a Cisco Stealthwatch Cloud deployment in...; Question 32: Which method is used to deploy certificates and configure th...; Question 33: Which type of DNS abuse exchanges data between two computers...; Question 34: A network administrator is using the Cisco ESA with AMP to u...; Question 35: What must be configured in Cisco ISE to enforce reauthentica...; Question 36: Which option is the main function of Cisco Firepower impact ...; Question 37: Which ASA deployment mode can provide separation of manageme...; Question 38: Which two key and block sizes are valid for AES? (Choose two...; Question 39: An engineer wants to generate NetFlow records on traffic tra...; Question 40: Refer to the exhibit. (Exhibit) A network administrator conf...; Question 41: What is a characteristic of a bridge group in ASA Firewall t...; Question 42: An administrator is trying to determine which applications a...; 1 commentQuestion 43: What is the result of running the crypto isakmp key ciscXXXX...; Question 44: Which parameter is required when configuring a Netflow expor...; Question 45: Which IPS engine detects ARP spoofing?...; Question 46: An organization wants to provide visibility and to identify ...; Question 47: What is the purpose of the My Devices Portal in a Cisco ISE ...; Question 48: Which statement about the configuration of Cisco ASA NetFlow...; Question 49: Which two behavioral patterns characterize a ping of death a...; Question 50: Which public cloud provider supports the Cisco Next Generati...; Question 51: Which two tasks allow NetFlow on a Cisco ASA 5500 Series fir...; Question 52: Which action controls the amount of URI text that is stored ...; Question 53: Drag and drop the capabilities from the left onto the correc...; Question 54: An organization is trying to implement micro-segmentation on...; Question 55: An administrator configures new authorization policies withi...; Question 56: An engineer has enabled LDAP accept queries on a listener. M...; Question 57: An engineer must force an endpoint to re-authenticate an alr...; Question 58: What provides the ability to program and monitor networks fr...; Question 59: Which telemetry data captures variations seen within the flo...; Question 60: Which Talos reputation center allows for tracking the reputa...; Question 61: Which Cisco Advanced Malware protection for Endpoints deploy...; Question 62: What is a feature of Cisco NetFlow Secure Event Logging for ...; Question 63: What is a benefit of performing device compliance?...; Question 64: What is a capability of Cisco ASA Netflow?...; Question 65: What is the Cisco API-based broker that helps reduce comprom...; Question 66: What are two DDoS attack categories? (Choose two)...; Question 67: When using Cisco AMP for Networks which feature copies a fil...; Question 68: An engineer has been tasked with configuring a Cisco FTD to ...; Question 69: Which flaw does an attacker leverage when exploiting SQL inj...; Question 70: Which posture assessment requirement provides options to the...; Question 71: Which two capabilities does TAXII support? (Choose two)...; Question 72: Which network monitoring solution uses streams and pushes op...; Question 73: When Cisco and other industry organizations publish and info...; Question 74: What is a difference between FlexVPN and DMVPN?...; Question 75: Refer to the exhibit. (Exhibit) An engineer configured wired...; Question 76: Which factor must be considered when choosing the on-premise...; Question 77: Refer to the exhibit. (Exhibit) An administrator is adding a...; Question 78: Which deployment model is the most secure when considering r...; Question 79: Which DevSecOps implementation process gives a weekly or dai...; Question 80: A customer has various external HTTP resources available inc...; Question 81: A network administrator configures Dynamic ARP Inspection on...; Question 82: Which kind of API that is used with Cisco DNA Center provisi...; Question 83: Which command enables 802.1X globally on a Cisco switch?...; Question 84: Which Cisco command enables authentication, authorization, a...; Question 85: Drag and drop the solutions from the left onto the solution'...; Question 86: Which solution combines Cisco IOS and IOS XE components to e...; Question 87: Refer to the exhibit. (Exhibit) Which command was used to ge...; Question 88: Which two deployment model configurations are supported for ...; Question 89: Which CLI command is used to register a Cisco FirePower sens...; Question 90: What is a difference between an XSS attack and an SQL inject...; Question 91: An engineer wants to automatically assign endpoints that hav...; Question 92: In an IaaS cloud services model, which security function is ...; Question 93: What is a commonality between DMVPN and FlexVPN technologies...; Question 94: Which two services must remain as on-premises equipment when...; Question 95: Which two endpoint measures are used to minimize the chances...; Question 96: A Cisco Firepower administrator needs to configure a rule to...; Question 97: Which Dos attack uses fragmented packets to crash a target m...; Question 98: An engineer is configuring a Cisco ESA and wants to control ...; Question 99: A network engineer has entered the snmp-server user andy myv...; Question 100: Which API is used for Content Security?...; Question 101: What is a function of 3DES in reference to cryptography?...; 1 commentQuestion 102: Which component of Cisco umbrella architecture increases rel...; Question 103: Using Cisco Firepower's Security Intelligence policies, upon...; Question 104: Which technology reduces data loss by identifying sensitive ...; Question 105: Which two characteristics of messenger protocols make data e...; Question 106: An engineer is configuring AMP for endpoints and wants to bl...; Question 107: Why is it important to have logical security controls on end...; Question 108: An administrator wants to ensure that all endpoints are comp...; Question 109: An engineer is configuring 802.1X authentication on Cisco sw...; Question 110: Which deployment model is the most secure when considering r...; Question 111: Refer to the exhibit. (Exhibit) Traffic is not passing throu...; Question 112: When configuring ISAKMP for IKEv1 Phase1 on a Cisco IOS rout...; Question 113: What is a difference between GETVPN and IPsec?...; Question 114: Which license is required for Cisco Security Intelligence to...; Question 115: Which PKI enrollment method allows the user to separate auth...

[×]

Download PDF File

Enter your email address to download Cisco.350-701.v2022-03-17.q115.pdf

Email:

Disclaimer:
Freecram doesn't offer Real GIAC Exam Questions. Freecram doesn't offer Real SAP Exam Questions. Freecram doesn't offer Real (ISC)² Exam Questions. Freecram doesn't offer Real CompTIA Exam Questions. Freecram doesn't offer Real Microsoft Exam Questions.
Oracle and Java are registered trademarks of Oracle and/or its affiliates.
Freecram material do not contain actual actual Oracle Exam Questions or material.
Microsoft®, Azure®, Windows®, Windows Vista®, and the Windows logo are registered trademarks of Microsoft Corporation.
Freecram Materials do not contain actual questions and answers from Cisco's Certification Exams. The brand Cisco is a registered trademark of CISCO, Inc.
CFA Institute does not endorse, promote or warrant the accuracy or quality of these questions. CFA® and Chartered Financial Analyst® are registered trademarks owned by CFA Institute.
Freecram does not offer exam dumps or questions from actual exams. We offer learning material and practice tests created by subject matter experts to assist and help learners prepare for those exams. All certification brands used on the website are owned by the respective brand owners. Freecram does not own or claim any ownership on any of the brands.

Question 14/115

LEAVE A REPLY

Download PDF File