This question shows the correct answer as incorrect:

- Install the Cisco Umbrella root CA onto the user's device (shows red, even though correct)

One of the answers to this question does not show as green:

- It automatically removes malicious emails from users' inbox. (shows red, even though correct)
- It prevents use of compromised accounts and social engineering. (shows green)

Passed 350-701 SCOR today, I can report H2P was very accurate and helped a lot.

I can report I passed today, saw maybe 5-7 questions that I had not seen before, overall H2P was very helpful on this exam.

Refer to the exhibit. When configuring a remote access VPN solution terminating on the Cisco ASA, an administrator would like to utilize an external token authentication mechanism in conjunction with AAA authentication using machine certificates. Which configuration item must be modified to allow this?

Correct Answer should be METHOD, its reporting AAA server group as correct which is not true.

Method defines which WHICH authentication method to use and one of those choices is AAA + Certificates while aaa server group lets you pick which set of AAA servers to point to.

Which feature within Cisco Umbrella allows for the ability to inspect secure HTTP traffic?

The correct answer should be "SSL decryption" but it is being marked as "destination lists" for correct answer.

Destination lists is how you block specific url/sites.....at least that's what I believe.

There is many new questions and labs in ENARSI, 3 new LABs, the exam consist of 4 LABs. And around 10 new questions.

After reading and studying the Cisco Press book and using this study aid, I still failed this exam. There is a lot of "policy based information" that just isn't covered in this Q&A. Also, the actual exam looks like it was put together by a 5 year old.

I took this exam on February, 17th and passed.  I didn't get around to posting in this forum about it.  Out of all the Cisco exams that I have prepped for with H2P,  this was probably the hardest one that I've taken.  I never reached a point where I was able to pass the practice exam in the 90 percentile.  It actually took a while before  I reached a point where  I  could pass the practice exam.  On top of that, new questions were added to the H2P practice test on multiple occasions. I had taken the practice exam so many times that I had reached a point where I  literally got  tired of it.  I decided to go ahead and schedule for the exam and take the test.  Questions on the exam were consistent with those studied on the H2P practice test.  Whenever, I encountered a question that I had not seen on the H2P practice exam, I didn't panic because I have come to expect that when it comes to Cisco exams.  I simply applied the same concepts that I had learned from the practice tests.  When I hit the submit button at the end of the exam I wasn't 100% sure what the results would be, but thank God I passed.

This question is about BGP path preferences... Currently the 'correct' answer is to apply a route map to modify the local preference. I don't understand why the correct answer isn't to set the weight of the preferred neighbor to 1?

By default, weight is 0 in BGP and we can see from the picture, the weight on both neighbors isn't configured. The picture also doesn't show what the current local preference values are, so even applying the route map we wouldn't know if a preference of 101 is enough based on the existing config we don't get shown.

Would appreciate a more in depth explanation if possible.

(04-24-2023, 08:01 PM)atommo Wrote: This question is about BGP path preferences... Currently the 'correct' answer is to apply a route map to modify the local preference. I don't understand why the correct answer isn't to set the weight of the preferred neighbor to 1?

By default, weight is 0 in BGP and we can see from the picture, the weight on both neighbors isn't configured. The picture also doesn't show what the current local preference values are, so even applying the route map we wouldn't know if a preference of 101 is enough based on the existing config we don't get shown.

Would appreciate a more in depth explanation if possible.