A network team is evaluating protocols for a new mobile application that requires low-latency connections and must work reliably over lossy cellular networks. The application also needs to tunnel traffic through a corporate proxy to enforce security policies. Which protocol combination best meets these requirements?

Use TCP with TLS 1.3 for transport and a traditional HTTP proxy.

Use UDP with DTLS for transport and a SOCKS5 proxy.

Use QUIC for the transport and MASQUE for the proxy tunnel.

Use IPsec in transport mode with a VPN gateway.

What is the main threat that post-quantum cryptography aims to address?

Quantum computers breaking current public-key algorithms.

Quantum computers breaking hash functions.

Quantum computers breaking TLS handshakes.

Quantum computers breaking symmetric encryption.

In symmetric encryption, which statement is true?

The key is publicly available to all parties.

The same key is used for both encryption and decryption.

Different keys are used for encryption and decryption.

It is primarily used for digital signatures.

A web administrator is troubleshooting a TLS handshake failure. The server certificate is valid, but clients report that the connection is not trusted. The administrator checks the certificate chain and finds that the intermediate CA certificate is not being sent by the server. What is the most likely cause and solution?

The client's clock is incorrect; synchronize the client's time.

The server's private key does not match the certificate; regenerate the key and reissue the certificate.

The server is not configured to send the intermediate certificate; add the intermediate certificate to the server's certificate chain.

The client does not have the root CA certificate; install the root CA on all clients.

A security engineer is designing a secure file storage system. The system must ensure that files are not tampered with and that only authorized users can read them. The engineer decides to use a hash for integrity and encryption for confidentiality. Which implementation is correct?

Encrypt the file, compute a hash of the ciphertext, and store the hash securely.

Compute a hash of the plaintext, encrypt the file, and store the hash alongside the encrypted file.

Encrypt the file and sign the hash with the sender's private key.

Use an authenticated encryption mode like AES-GCM, which provides both confidentiality and integrity.

CiscoCertified Network Professional Security

Domain 1Objective 5

1.5 Describe Cryptography Security Components Such as Hashing, Encryption, PKI, SSL, TLS, QUIC, MASQUE, IPsec, NAT-T IPv4 for IPsec, Preshared Key, Certificate-Based Authorization, and Post-Quantum Cryptography 350-701 Practice Questions (Page 1)

Part of the Security Concepts domain, which accounts for 20% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

12concepts

20%of the exam

Questions 1–5

1application · medium
A network team is evaluating protocols for a new mobile application that requires low-latency connections and must work reliably over lossy cellular networks. The application also needs to tunnel traffic through a corporate proxy to enforce security policies. Which protocol combination best meets these requirements?
Select an answer first
2foundation · easy
What is the main threat that post-quantum cryptography aims to address?
Select an answer first
3foundation · easy
In symmetric encryption, which statement is true?
Select an answer first
4application · medium
A web administrator is troubleshooting a TLS handshake failure. The server certificate is valid, but clients report that the connection is not trusted. The administrator checks the certificate chain and finds that the intermediate CA certificate is not being sent by the server. What is the most likely cause and solution?
Select an answer first
5expert · hard
A security engineer is designing a secure file storage system. The system must ensure that files are not tampered with and that only authorized users can read them. The engineer decides to use a hash for integrity and encryption for confidentiality. Which implementation is correct?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.

1.5 Describe Cryptography Security Components Such as Hashing, Encryption, PKI, SSL, TLS, QUIC, MASQUE, IPsec, NAT-T IPv4 for IPsec, Preshared Key, Certificate-Based Authorization, and Post-Quantum Cryptography 350-701 Practice Questions (Page 1)

Questions 1–5

What is the main threat that post-quantum cryptography aims to address?

In symmetric encryption, which statement is true?

A security engineer is designing a secure file storage system. The system must ensure that files are not tampered with and that only authorized users can read them. The engineer decides to use a hash for integrity and encryption for confidentiality. Which implementation is correct?

Keep studying — Security Concepts