What is the primary purpose of hardening a machine image before deploying it to production?

To reduce the attack surface by removing unnecessary components and applying security configurations

To ensure the image is compatible with all hypervisor platforms

To speed up the deployment process by pre-installing all applications

To reduce the storage footprint of the image to lower hosting costs

How do hardened machine images help maintain consistency in deployment scenarios?

By storing the image in a public repository for easy access

By automatically updating the image after each deployment

By allowing each instance to configure its own security settings at runtime

By ensuring every deployed instance starts from the same secure baseline configuration

A security team is preparing a Windows Server 2022 image for deployment to 200 virtual machines in a private cloud. The team wants to ensure that the image does not contain any software that is not required for the server's role as a web server. Which action is the most effective way to achieve this before the image is captured?

Enable Windows Defender Firewall and then capture the image

Uninstall all non-essential roles and features, then remove any leftover binaries and applications from the image

Apply the latest security patches and then capture the image without further changes

Run sysprep with the /generalize option and then capture the image

A Windows image is being prepared for a fleet of file servers. The security team wants to ensure that the image does not contain any user data or credentials from the build process. Which hardening step should be performed before capturing the image?

Run Sysprep with the generalize option to remove machine-specific information and clear user profiles.

Use a configuration management tool to reset all passwords after deployment.

Delete the local administrator account and create a new one after deployment.

Format the system drive and reinstall the OS before capturing the image.

A company has a golden image for its application servers. The image is hardened and tested. The company is planning to deploy a new application that requires a different configuration than the current image provides. What is the best approach?

Use a generic image and apply the new application's configuration after deployment

Create a new golden image for the new application based on the hardened baseline

Modify the existing golden image to support both applications

Deploy the existing image and manually configure the new application on each server

CiscoCertified Network Professional Cybersecurity (CBRCOR)

Domain 2Objective 2

2.2 Describe the Use of Hardening Machine Images for Deployment 350-201 Practice Questions (Page 2)

Part of the Techniques domain, which accounts for 30% of the 350-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~15–24 in this domain), expect 1–1 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

3concepts

30%of the exam

Questions 6–10

6foundation · easy
What is the primary purpose of hardening a machine image before deploying it to production?
Select an answer first
7foundation · easy
How do hardened machine images help maintain consistency in deployment scenarios?
Select an answer first
8application · medium
A security team is preparing a Windows Server 2022 image for deployment to 200 virtual machines in a private cloud. The team wants to ensure that the image does not contain any software that is not required for the server's role as a web server. Which action is the most effective way to achieve this before the image is captured?
Select an answer first
9application · medium
A Windows image is being prepared for a fleet of file servers. The security team wants to ensure that the image does not contain any user data or credentials from the build process. Which hardening step should be performed before capturing the image?
Select an answer first
10expert · hard
A company has a golden image for its application servers. The image is hardened and tested. The company is planning to deploy a new application that requires a different configuration than the current image provides. What is the best approach?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-201” is a trademark of its owner, used for identification only.