Which field is typically included in a NetFlow or IPFIX flow record?

The raw bytes of the first packet in the flow

The complete packet header of every packet

The source and destination IP addresses

What is the main purpose of centralizing syslog messages from network devices?

To provide real-time flow-level traffic statistics

To automatically block malicious traffic

To replace the need for packet capture

To enable correlation and forensic analysis of events across devices

Which statement best describes the primary purpose of security monitoring?

To ensure that all network traffic is encrypted end-to-end

To replace the need for regular vulnerability assessments and penetration testing

To continuously observe, detect, and respond to security events across the environment

To automatically patch all vulnerabilities as soon as they are discovered

A company has deployed EDR on all endpoints. The SOC receives an alert from the EDR about a suspicious PowerShell script on a workstation. The SOC wants to automatically isolate the workstation from the network and then investigate further. They also want to ensure that the isolation does not disrupt other critical services that the workstation provides. What should the SOC do?

Disable the workstation's network adapter remotely

Immediately block the workstation's IP on the firewall

Use the EDR's built-in isolation feature to quarantine the workstation

Wait for the EDR to automatically remediate the threat

CiscoCertified Network Professional Security

Domain 2Objective 2

2.2 Describe Security Monitoring and Telemetry Technologies 350-701 Practice Questions (Page 5)

Part of the Network Security domain, which accounts for 25% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 1–2 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

12concepts

25%of the exam

Questions 21–25

21foundation · medium
Which field is typically included in a NetFlow or IPFIX flow record?
Select an answer first
22foundation · medium
What is the main purpose of centralizing syslog messages from network devices?
Select an answer first
23foundation · medium
Which telemetry source provides flow-level information about network traffic, such as source and destination IP addresses and ports?
Select an answer first
24foundation · medium
Which statement best describes the primary purpose of security monitoring?
Select an answer first
25expert · hard
A company has deployed EDR on all endpoints. The SOC receives an alert from the EDR about a suspicious PowerShell script on a workstation. The SOC wants to automatically isolate the workstation from the network and then investigate further. They also want to ensure that the isolation does not disrupt other critical services that the workstation provides. What should the SOC do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.

2.2 Describe Security Monitoring and Telemetry Technologies 350-701 Practice Questions (Page 5)

Questions 21–25

Which field is typically included in a NetFlow or IPFIX flow record?

What is the main purpose of centralizing syslog messages from network devices?

Which telemetry source provides flow-level information about network traffic, such as source and destination IP addresses and ports?

Which statement best describes the primary purpose of security monitoring?

Keep studying — Network Security