A company discovers that an employee's password was reused from a personal account that appeared in a public data breach. An attacker used that password to log in to the corporate VPN. Which mitigation technique would have MOST directly prevented this attack?

Conducting annual security awareness training for all employees

Deploying an intrusion prevention system (IPS) on the network perimeter

Applying the latest operating system patches to all endpoints

Implementing multi-factor authentication (MFA) for VPN access

A company has a mix of Windows and Linux servers. A critical vulnerability is disclosed in a third-party application used on both platforms. The vendor has released a patch, but the company has a change-freeze window during the holiday season. Which approach is the BEST risk management decision?

Wait until the change freeze ends without any additional controls

Disconnect all servers from the network until the patch is applied

Apply the patch immediately to all servers despite the change freeze, because the vulnerability is critical

Implement compensating controls such as firewall rules and intrusion prevention signatures, and schedule the patch for the next maintenance window

A hospital's IT department wants to reduce the risk of ransomware infections spreading from infected workstations to the electronic health record (EHR) servers. The EHR servers contain sensitive patient data and must remain accessible to authorized staff. Which mitigation approach best balances security and availability?

Segment the network so EHR servers are in a separate VLAN with strict firewall rules

Block all outbound internet traffic from the hospital network

Disconnect the EHR servers from the network entirely

Install antivirus on all workstations and rely on signature updates

CiscoCertified Network Associate (CCNA)

Domain 5Objective 1

5.1 Define Key Security Concepts (threats, Vulnerabilities, Exploits, and Mitigation Techniques) 200-301 Practice Questions (Page 6)

Part of the Security Fundamentals domain, which accounts for 15% of the 200-301 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

4concepts

15%of the exam

Questions 26–30

26foundation · easy
Which security threat is characterized by an attacker sending fraudulent emails that appear to come from a trusted source to trick recipients into revealing credentials?
Select an answer first
27foundation · easy
A network administrator receives an alert about a workstation that is sending a large volume of traffic to a single server, causing the server to become unresponsive to legitimate users. Which type of threat does this describe?
Select an answer first
28application · medium
A company discovers that an employee's password was reused from a personal account that appeared in a public data breach. An attacker used that password to log in to the corporate VPN. Which mitigation technique would have MOST directly prevented this attack?
Select an answer first
29expert · hard
A company has a mix of Windows and Linux servers. A critical vulnerability is disclosed in a third-party application used on both platforms. The vendor has released a patch, but the company has a change-freeze window during the holiday season. Which approach is the BEST risk management decision?
Select an answer first
30application · medium
A hospital's IT department wants to reduce the risk of ransomware infections spreading from infected workstations to the electronic health record (EHR) servers. The EHR servers contain sensitive patient data and must remain accessible to authorized staff. Which mitigation approach best balances security and availability?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to 200-301

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-301” is a trademark of its owner, used for identification only.

5.1 Define Key Security Concepts (threats, Vulnerabilities, Exploits, and Mitigation Techniques) 200-301 Practice Questions (Page 6)

Questions 26–30

Which security threat is characterized by an attacker sending fraudulent emails that appear to come from a trusted source to trick recipients into revealing credentials?

A network administrator receives an alert about a workstation that is sending a large volume of traffic to a single server, causing the server to become unresponsive to legitimate users. Which type of threat does this describe?

A company discovers that an employee's password was reused from a personal account that appeared in a public data breach. An attacker used that password to log in to the corporate VPN. Which mitigation technique would have MOST directly prevented this attack?

A company has a mix of Windows and Linux servers. A critical vulnerability is disclosed in a third-party application used on both platforms. The vendor has released a patch, but the company has a change-freeze window during the holiday season. Which approach is the BEST risk management decision?

Keep studying — Security Fundamentals