What is a key characteristic of an inline deployment for an IPS or firewall?

The device is placed directly in the traffic path, so all traffic must pass through it.

The device receives a copy of traffic from a switch port for analysis.

The device is located in the cloud and inspects traffic via API calls.

The device is connected to a management network and does not see real traffic.

A company is deploying a firewall cluster in active-passive mode. They want to ensure that if the active firewall fails, the passive firewall takes over with minimal disruption. Which configuration is essential?

Active-passive clustering without stateful failover

Virtual IP address for the cluster

Load balancing between the two firewalls

Stateful failover with synchronization of connection tables

A company wants to deploy an IPS that can detect and block both known and unknown threats. They also want to ensure that legitimate traffic is not blocked. Which IPS detection method should they use?

Signature-based detection with regular updates

Reputation-based detection using threat intelligence feeds

Hybrid detection combining signatures and anomaly detection

Anomaly-based detection with behavioral analysis

What does 'identity-based policy' in a firewall allow an administrator to do?

Authenticate users before they can access the firewall's management interface.

Block traffic based on the source MAC address of the device.

Create security rules based on user or group identity rather than only IP addresses.

Encrypt traffic based on the destination server's identity.

A security team is deploying a new IPS and wants to ensure that the IPS rules are updated automatically with the latest threat intelligence. They also want to share anonymized threat data with other organizations to improve detection. Which integration should they configure?

Centralized management platform with policy templates

Manual signature updates from the vendor

Threat intelligence feed subscription and participation in a threat-sharing community

CiscoCertified Network Professional Security

Domain 2Objective 1

2.1 Describe Network Security Solutions and Deployment Models That Provide Intrusion Prevention and Firewall Capabilities 350-701 Practice Questions (Page 2)

Part of the Network Security domain, which accounts for 25% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 1–2 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

5concepts

25%of the exam

Questions 6–10

6foundation · easy
What is a key characteristic of an inline deployment for an IPS or firewall?
Select an answer first
7expert · hard
A company is deploying a firewall cluster in active-passive mode. They want to ensure that if the active firewall fails, the passive firewall takes over with minimal disruption. Which configuration is essential?
Select an answer first
8application · medium
A company wants to deploy an IPS that can detect and block both known and unknown threats. They also want to ensure that legitimate traffic is not blocked. Which IPS detection method should they use?
Select an answer first
9foundation · easy
What does 'identity-based policy' in a firewall allow an administrator to do?
Select an answer first
10application · medium
A security team is deploying a new IPS and wants to ensure that the IPS rules are updated automatically with the latest threat intelligence. They also want to share anonymized threat data with other organizations to improve detection. Which integration should they configure?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.