An employee receives an email that appears to be from the CEO, urgently requesting that the employee purchase gift cards and reply with the codes. The email address is similar to the CEO's but has a slight typo. Which type of threat is this, and which mitigation is most effective?

Exploit; patch the email client software

Malware; run a full antivirus scan on the employee's computer

Denial-of-service; deploy a web application firewall

Phishing; implement security awareness training and email authentication (SPF/DKIM/DMARC)

A company is designing a defense-in-depth strategy. They have limited budget and must choose between investing in a next-generation firewall (NGFW) or a comprehensive security awareness training program. The company's biggest risk is employees clicking on malicious links. Which investment is MORE aligned with the risk?

The NGFW, because it can block malicious links at the network level

Neither, because the risk is acceptable

The security awareness training program, because it directly addresses the human behavior that creates the risk

Both equally, because they address different layers

A company has a legacy application that cannot be patched because the vendor is out of business. The application listens on a TCP port and is accessible from the internal network. The company must keep the application running for regulatory reasons. Which mitigation approach provides the BEST balance of security and operational continuity?

Move the application to the public internet so external security vendors can monitor it

Disable the application immediately to eliminate the risk

Install a third-party antivirus product on the server

Place the application behind a firewall that restricts access to only authorized users and segment it from the rest of the network

A network administrator is reviewing security logs and finds that an attacker was able to access a server by exploiting a service that was accidentally left running after a software installation. Which type of vulnerability is this, and which mitigation is MOST appropriate?

Misconfiguration; disable unnecessary services and apply the principle of least functionality

Weak password; enforce a stronger password policy

Phishing; provide user awareness training

Denial-of-service; deploy an intrusion prevention system

CiscoCertified Network Associate (CCNA)

Domain 5Objective 1

5.1 Define Key Security Concepts (threats, Vulnerabilities, Exploits, and Mitigation Techniques) 200-301 Practice Questions (Page 1)

Part of the Security Fundamentals domain, which accounts for 15% of the 200-301 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

4concepts

15%of the exam

Questions 1–5

1application · medium
An employee receives an email that appears to be from the CEO, urgently requesting that the employee purchase gift cards and reply with the codes. The email address is similar to the CEO's but has a slight typo. Which type of threat is this, and which mitigation is most effective?
Select an answer first
2expert · hard
A company is designing a defense-in-depth strategy. They have limited budget and must choose between investing in a next-generation firewall (NGFW) or a comprehensive security awareness training program. The company's biggest risk is employees clicking on malicious links. Which investment is MORE aligned with the risk?
Select an answer first
3foundation · easy
Which mitigation technique is most effective at reducing the risk of employees falling for phishing emails?
Select an answer first
4expert · hard
A company has a legacy application that cannot be patched because the vendor is out of business. The application listens on a TCP port and is accessible from the internal network. The company must keep the application running for regulatory reasons. Which mitigation approach provides the BEST balance of security and operational continuity?
Select an answer first
5application · medium
A network administrator is reviewing security logs and finds that an attacker was able to access a server by exploiting a service that was accidentally left running after a software installation. Which type of vulnerability is this, and which mitigation is MOST appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 200-301

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-301” is a trademark of its owner, used for identification only.

5.1 Define Key Security Concepts (threats, Vulnerabilities, Exploits, and Mitigation Techniques) 200-301 Practice Questions (Page 1)

Questions 1–5

An employee receives an email that appears to be from the CEO, urgently requesting that the employee purchase gift cards and reply with the codes. The email address is similar to the CEO's but has a slight typo. Which type of threat is this, and which mitigation is most effective?

Which mitigation technique is most effective at reducing the risk of employees falling for phishing emails?

A network administrator is reviewing security logs and finds that an attacker was able to access a server by exploiting a service that was accidentally left running after a software installation. Which type of vulnerability is this, and which mitigation is MOST appropriate?

Keep studying — Security Fundamentals