In a threat model for a remote access solution, the team identifies that employees can connect directly to internal servers from the internet, and the authentication is only a username and password. Which mitigation strategy would most effectively reduce the risk of credential theft and unauthorized access?

Increase password complexity requirements

Move the servers to a different subnet

Implement multi-factor authentication for all remote access

Which formula best represents the concept of risk in threat modeling?

Risk = Threat × Vulnerability × Impact

Risk = Vulnerability - Mitigation

After completing a threat model for a new customer-facing application, the security team needs to communicate the findings to the executive board. The board is primarily concerned with business risk and return on investment. Which approach best communicates the threat model results to this audience?

Provide a detailed technical report of all vulnerabilities and exploits

List all threat actors and their capabilities

Present a summary of top risks with potential business impact and recommended mitigations

Share the full data flow diagrams and trust boundaries

Which of the following is an example of a mitigation strategy for a threat of unauthorized access to a database?

Documenting the threat in the threat model

Implementing strong authentication and access controls

Increasing the likelihood rating in the risk assessment

Conducting a penetration test to confirm the vulnerability

CiscoCertified Network Professional Cybersecurity (CBRCOR)

Domain 3Objective 1

3.1 Analyze Components in a Threat Model 350-201 Practice Questions (Page 4)

Part of the Processes domain, which accounts for 30% of the 350-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~15–24 in this domain), expect 2–2 from this objective — we provide 44 practice questions to prepare you well beyond it. (estimate)

44questions here

9free pages

9concepts

30%of the exam

Questions 16–20

16application · medium
In a threat model for a remote access solution, the team identifies that employees can connect directly to internal servers from the internet, and the authentication is only a username and password. Which mitigation strategy would most effectively reduce the risk of credential theft and unauthorized access?
Select an answer first
17foundation · easy
Which formula best represents the concept of risk in threat modeling?
Select an answer first
18application · medium
After completing a threat model for a new customer-facing application, the security team needs to communicate the findings to the executive board. The board is primarily concerned with business risk and return on investment. Which approach best communicates the threat model results to this audience?
Select an answer first
19foundation · easy
Which of the following is an example of a mitigation strategy for a threat of unauthorized access to a database?
Select an answer first
20foundation · easy
Which threat modeling methodology is primarily used to categorize threats based on Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-201” is a trademark of its owner, used for identification only.

3.1 Analyze Components in a Threat Model 350-201 Practice Questions (Page 4)

Questions 16–20

Which formula best represents the concept of risk in threat modeling?

Which of the following is an example of a mitigation strategy for a threat of unauthorized access to a database?

Which threat modeling methodology is primarily used to categorize threats based on Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege?

Keep studying — Processes