CiscoCertified Network Professional Security
Domain 1Objective 6
1.6 Describe Site-To-Site and Remote Access VPN Deployment Types Such as Virtual Tunnel Interfaces, Standards-Based IPsec, SSL VPN, DMVPN, FlexVPN, and GETVPN 350-701 Practice Questions (Page 1)
Part of the Security Concepts domain, which accounts for 20% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)
30questions here
6free pages
6concepts
20%of the exam
Questions 1–5
- 1
A financial institution uses GETVPN over a private MPLS WAN. The security team wants to ensure that if a group member is compromised, the attacker cannot decrypt previously captured traffic. Which GETVPN feature should be enabled to provide this protection?
Select an answer first - 2
A hospital allows physicians to access an internal web-based patient portal from personal tablets while off-site. The portal uses HTTPS and requires no client software. The security team wants to enforce multi-factor authentication and restrict access to the portal only, not the entire internal network. Which VPN deployment satisfies these requirements?
Select an answer first - 3
A managed security service provider (MSSP) wants to offer a single VPN solution that supports both site-to-site connections for enterprise customers and remote access for their employees. The solution must use IKEv2 and support dynamic routing for site-to-site. Which technology should the MSSP deploy?
Select an answer first - 4
Which IKE version is the foundation of FlexVPN, providing a flexible and standardized approach for various VPN topologies?
Select an answer first - 5
A multinational corporation has 500 remote sites connected via DMVPN. The network team is experiencing high CPU utilization on the hub router during peak hours because all spoke-to-spoke traffic is being routed through the hub. The team wants to reduce hub load while maintaining the ability to add new sites dynamically. Which action should be taken?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.