A security team is automating the deployment of firewall rules on a Cisco FTD device. The team wants to use the FTD REST API. However, the team is concerned about the security of the API credentials. What is the best practice for storing and using API credentials in the automation script?

Use a shared service account with a long-lived password.

Use the CLI over SSH instead of the API.

Hardcode the credentials in the script for simplicity.

Store the credentials in a secure vault and retrieve them at runtime.

A network engineer is configuring NTP on a Cisco ASA firewall. The firewall is in a DMZ and the engineer wants to ensure that the time synchronization is secure against spoofing attacks. The NTP server is a public server that does not support authentication. What should the engineer do to mitigate the risk?

Configure NTP to use a specific source interface and restrict NTP traffic to the server's IP address using an ACL.

Configure NTP with a symmetric key and set the source interface to a loopback.

Use NTP with MD5 authentication and share the key with the public server.

Disable NTP on the firewall and manually set the time.

CiscoCertified Network Professional Security

Domain 2Objective 7

2.7 Configure Secure Network Management of Perimeter Security and Infrastructure Devices Such as SNMPv3, NetConf, RestConf, APIs, Secure Syslog, and NTP with Authentication 350-701 Practice Questions (Page 4)

Part of the Network Security domain, which accounts for 25% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 1–2 from this objective — we provide 20 practice questions to prepare you well beyond it. (estimate)

20questions here

4free pages

5concepts

25%of the exam

Questions 16–20

16expert · hard
A security team is automating the deployment of firewall rules on a Cisco FTD device. The team wants to use the FTD REST API. However, the team is concerned about the security of the API credentials. What is the best practice for storing and using API credentials in the automation script?
Select an answer first
17foundation · easy
Which syslog feature ensures that log messages are not altered or forged during transmission?
Select an answer first
18application · medium
A network engineer is configuring NTP on a Cisco ASA firewall. The firewall is in a DMZ and the engineer wants to ensure that the time synchronization is secure against spoofing attacks. The NTP server is a public server that does not support authentication. What should the engineer do to mitigate the risk?
Select an answer first
19foundation · easy
Which API authentication method is commonly used with HTTPS-based device APIs and involves a token that is included in the Authorization header of each request?
Select an answer first
20foundation · easy
Which data format is commonly used by modern device APIs to represent structured configuration and operational data, and is also used in YANG data models?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to 350-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.

2.7 Configure Secure Network Management of Perimeter Security and Infrastructure Devices Such as SNMPv3, NetConf, RestConf, APIs, Secure Syslog, and NTP with Authentication 350-701 Practice Questions (Page 4)

Questions 16–20

A security team is automating the deployment of firewall rules on a Cisco FTD device. The team wants to use the FTD REST API. However, the team is concerned about the security of the API credentials. What is the best practice for storing and using API credentials in the automation script?

Which syslog feature ensures that log messages are not altered or forged during transmission?

Which API authentication method is commonly used with HTTPS-based device APIs and involves a token that is included in the Authorization header of each request?

Which data format is commonly used by modern device APIs to represent structured configuration and operational data, and is also used in YANG data models?

Keep studying — Network Security