A security architect is designing a deployment pipeline for a web application. The pipeline will use a hardened VM image. The architect must ensure that the image is updated with the latest security patches before each deployment, but also wants to minimize the time to deploy. Which approach best meets both requirements?

Use a static hardened image and rely on the cloud provider's automatic patching.

Use a static hardened image and apply patches to running instances after deployment.

Use a static hardened image and manually update it before each deployment.

Use a pipeline that rebuilds the hardened image from scratch on a regular schedule, and then deploys from the updated image.

A security engineer is responsible for maintaining the golden image used for all new Windows workstations. The engineer wants to ensure that the image is secure before it is deployed to the organization. Which step is most important to perform before capturing the image?

Disable Windows Defender to improve performance

Create a local administrator account with a default password

Install all available optional Windows features

Apply all critical and important security updates

Which action is part of hardening a machine image?

Setting the firewall to allow all traffic to simplify connectivity

Applying the latest security patches to the operating system and installed applications

Installing a web server to provide additional functionality

Adding more users to the local administrators group for easier management

An organization plans to deploy a new application to 100 servers. The security team has provided a hardened image that includes the application and its dependencies. What is the most important consideration when deploying this image to ensure security is maintained?

Ensure that the image is deployed to all servers without any modifications

Deploy the image and then apply all available updates after deployment

Deploy the image and then remove any unnecessary services that are running

Allow each server to be customized after deployment to meet specific needs

A security team is hardening a Linux image for a web server. The team wants to ensure that the image is secure but also that it can be easily maintained. Which approach best balances security and maintainability?

Manually harden the image and document the steps in a wiki

Use a minimal base image and add only the required packages, but do not automate the build

Use a full OS image and disable unnecessary services after deployment

Use a configuration management tool to define the desired state and build the image from that definition

CiscoCertified Network Professional Cybersecurity (CBRCOR)

Domain 2Objective 2

2.2 Describe the Use of Hardening Machine Images for Deployment 350-201 Practice Questions (Page 5)

Part of the Techniques domain, which accounts for 30% of the 350-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~15–24 in this domain), expect 1–1 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

3concepts

30%of the exam

Questions 21–25

21expert · hard
A security architect is designing a deployment pipeline for a web application. The pipeline will use a hardened VM image. The architect must ensure that the image is updated with the latest security patches before each deployment, but also wants to minimize the time to deploy. Which approach best meets both requirements?
Select an answer first
22application · medium
A security engineer is responsible for maintaining the golden image used for all new Windows workstations. The engineer wants to ensure that the image is secure before it is deployed to the organization. Which step is most important to perform before capturing the image?
Select an answer first
23foundation · easy
Which action is part of hardening a machine image?
Select an answer first
24application · medium
An organization plans to deploy a new application to 100 servers. The security team has provided a hardened image that includes the application and its dependencies. What is the most important consideration when deploying this image to ensure security is maintained?
Select an answer first
25expert · hard
A security team is hardening a Linux image for a web server. The team wants to ensure that the image is secure but also that it can be easily maintained. Which approach best balances security and maintainability?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-201” is a trademark of its owner, used for identification only.