An administrator discovers that an attacker exploited a known SQL injection vulnerability in a web application to extract customer data. The vulnerability was disclosed six months ago, but the application was never patched. Which mitigation would have MOST likely prevented this exploit?

Applying the vendor's security patch promptly after it was released

Using a stronger password for the database administrator account

Deploying a firewall to block all inbound traffic to the web server

Encrypting the database contents at rest

A network administrator finds that a switch has been left with the default community string 'public' on SNMPv2c. An attacker uses this to read the device configuration. Which type of vulnerability is this, and which mitigation is MOST effective?

Misconfiguration; change the community string to a strong value and restrict SNMP access by ACL

Software flaw; upgrade the switch firmware to the latest version

Weak password; enforce a password policy for the enable secret

Phishing; provide security awareness training to administrators

A company's public-facing web server becomes unresponsive during a product launch. The network team observes a massive influx of TCP SYN packets from thousands of different source IP addresses, none of which complete the three-way handshake. Which type of threat is this, and which mitigation is most appropriate?

Worm propagation; isolate the server from the network

Distributed denial-of-service (DDoS) attack; deploy rate limiting and SYN cookies on the firewall

Phishing campaign; block the source IP addresses

Man-in-the-middle attack; enable HTTPS on the server

A user receives an email that appears to be from the company's CEO, urgently requesting that the user purchase gift cards and send the codes. The email address is slightly different from the CEO's real address. Which type of threat is this, and which mitigation is MOST effective?

Phishing/social engineering; provide security awareness training and verify unusual requests through a secondary channel

Malware infection; run an antivirus scan on the user's computer

Exploit of a software vulnerability; apply the latest operating system patches

Denial-of-service attack; deploy a web application firewall

CiscoCertified Network Associate (CCNA)

Domain 5Objective 1

5.1 Define Key Security Concepts (threats, Vulnerabilities, Exploits, and Mitigation Techniques) 200-301 Practice Questions (Page 5)

Part of the Security Fundamentals domain, which accounts for 15% of the 200-301 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

4concepts

15%of the exam

Questions 21–25

21application · medium
An administrator discovers that an attacker exploited a known SQL injection vulnerability in a web application to extract customer data. The vulnerability was disclosed six months ago, but the application was never patched. Which mitigation would have MOST likely prevented this exploit?
Select an answer first
22application · medium
A network administrator finds that a switch has been left with the default community string 'public' on SNMPv2c. An attacker uses this to read the device configuration. Which type of vulnerability is this, and which mitigation is MOST effective?
Select an answer first
23foundation · easy
Which of the following is a common type of vulnerability that arises from a coding error in an application, such as a buffer overflow?
Select an answer first
24application · medium
A company's public-facing web server becomes unresponsive during a product launch. The network team observes a massive influx of TCP SYN packets from thousands of different source IP addresses, none of which complete the three-way handshake. Which type of threat is this, and which mitigation is most appropriate?
Select an answer first
25application · medium
A user receives an email that appears to be from the company's CEO, urgently requesting that the user purchase gift cards and send the codes. The email address is slightly different from the CEO's real address. Which type of threat is this, and which mitigation is MOST effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 200-301

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-301” is a trademark of its owner, used for identification only.

5.1 Define Key Security Concepts (threats, Vulnerabilities, Exploits, and Mitigation Techniques) 200-301 Practice Questions (Page 5)

Questions 21–25

An administrator discovers that an attacker exploited a known SQL injection vulnerability in a web application to extract customer data. The vulnerability was disclosed six months ago, but the application was never patched. Which mitigation would have MOST likely prevented this exploit?

A network administrator finds that a switch has been left with the default community string 'public' on SNMPv2c. An attacker uses this to read the device configuration. Which type of vulnerability is this, and which mitigation is MOST effective?

Which of the following is a common type of vulnerability that arises from a coding error in an application, such as a buffer overflow?

A user receives an email that appears to be from the company's CEO, urgently requesting that the user purchase gift cards and send the codes. The email address is slightly different from the CEO's real address. Which type of threat is this, and which mitigation is MOST effective?

Keep studying — Security Fundamentals