Practice 350-701 Exam Online

Question 1

Which Cisco ASA deployment model is used to filter traffic between hosts in the same IP subnet using higherlevel protocols without readdressing the network?

A : routed mode

B : transparent mode

C : single context mode

D : multiple context mode

Answer: B

Question 2

Which cloud service offering allows customers to access a web application that is being hosted, managed, and maintained by a cloud service provider?

A : IaC

B : SaaS

C : IaaS

D : PaaS

Answer: B

Question 3

Refer to the exhibit. All servers are in the same VLAN/Subnet. DNS Server-1 and DNS Server-2 must communicate with each other, and all servers must communicate with default gateway multilayer switch. Which type of private VLAN ports should be configured to prevent communication between DNS servers and the file server?

A :

Configure GigabitEthernet0/1 as community port, GigabitEthernet0/2 as isolated port, and GigabitEthernet0/3 and GigabitEthernet0/4 as promiscuous ports.

B :

Configure GigabitEthernet0/1 as community port, GigabitEthernet0/2 as promiscuous port, Gigabit Ethernet0/3 and GigabitEthernet0/4 as isolated ports C. Configure GigabitEthernet0/1 as promiscuous port, GigabitEthernet0/2 as isolated port and GigabitEthernet0/3 and GrgabitEthernet0/4 as community ports

C :

Configure GigabitEthernet0/1 as promiscuous port, GigabitEthernet0/2 as community port, and GigabitEthernet0/3 and GrgabitEthernet0/4 as isolated ports.

Answer: C

Question 4

A network security engineer must export packet captures from the Cisco FMC web browser while troubleshooting an issue. When navigating to the address https:///capure/CAPI/pcap/test.pcap, an error 403: Forbidden is given instead of the PCAP file. Which action must the engineer take to resolve this issue?

A : Disable the proxy setting on the browser

B : Disable the HTTPS server and use HTTP instead

C : Use the Cisco FTD IP address as the proxy server setting on the browser

D : Enable the HTTPS server for the device platform policy

Answer: D

Question 5

What are two differences between a Cisco WSA that is running in transparent mode and one running in explicit mode? (Choose two)

A : The Cisco WSA responds with its own IP address only if it is running in explicit mode.

B : The Cisco WSA is configured in a web browser only if it is running in transparent mode.

C : The Cisco WSA responds with its own IP address only if it is running in transparent mode.

D : The Cisco WSA uses a Layer 3 device to redirect traffic only if it is running in transparent mode.

E : When the Cisco WSA is running in transparent mode, it uses the WSA's own IP address as the HTTP request destination.

Answer: A,D

Name:	Implementing and Operating Cisco Security Core Technologies
Exam Code:	350-701
Certification:	CCNP Security
Vendor:	Cisco
Total Questions:	731
Last Updated:	Aug 01, 2026

Cisco 350-701 Answers