Describe network security solutions and deployment models that provide intrusion prevention and firewall capabilities
8 practice questions under this official exam objective (350-701), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
8 total · page 1 of 1Cisco ESA TCP Reset for Malicious Domain Prevention
This question tests the specific mechanism in Cisco Email Security Appliance (ESA) required to interrupt a connection at Layer 4. The correct configur
Cisco ESA AMP File Upload Behavior Under Network Congestion
This question tests the Cisco Email Security Appliance (ESA) behavior when uploading files to Advanced Malware Protection (AMP) fails due to network c
Which Cisco Firewall Solution Requires Zone Definition?
Zone-Based Policy Firewall (ZBFW) on Cisco IOS XE requires security zones to be explicitly defined and interfaces assigned before any inter-zone polic
Cisco Secure Web Appliance Deployment Modes
This page explains the differences between Standard, Hybrid, and Cloud Web Security Connector modes for Cisco Secure Web Appliance (WSA), establishing
Which Two Devices Support WCCP for Traffic Redirection?
WCCP lets a router or firewall intercept and redirect web flows to a caching or proxy appliance. This page establishes that Cisco IOS routers and the
Which Solution Protects a Web Server from SQL Injection?
SQL injection is an application-layer attack that an inline intrusion prevention system can block by inspecting traffic for malicious SQL patterns. Th
Which problem does a multicontext firewall solve?
Deploying a multicontext firewall on Cisco ASA creates multiple virtual firewalls, each with its own routing table, which solves overlapping IP addres
Cisco Firewall Solution with Policy Language Support
The Zone-Based Policy Firewall (ZFW) is the Cisco firewall solution that utilizes Cisco Policy Language for defining traffic inspection policies betwe