A system administrator is hardening a Linux image for a database server. The administrator wants to ensure that only necessary services are running and that the system is configured securely. Which action is most appropriate?

Enable all services to ensure the system is fully functional

Disable the firewall to avoid interfering with database connections

Keep default services enabled but restrict network access with a firewall

Disable all services that are not required for the database role

A DevOps team is creating a Linux VM image for a web server fleet. They want to ensure that the image does not include any development tools or compilers that could be used to build exploits if the server is compromised. Which hardening technique directly addresses this concern?

Remove the gcc, make, and other build-essential packages from the image.

Enable SELinux in enforcing mode and configure appropriate policies.

Apply the latest security patches to the kernel and installed packages.

Configure the web server to run as a non-root user with minimal privileges.

Which statement best describes the process of hardening a machine image?

Applying security configurations, removing unnecessary software, and updating the image before it is used for deployments

Testing the image on multiple hardware platforms to ensure compatibility

Encrypting the image file to protect it from unauthorized access

Creating a snapshot of a running system and storing it in a secure repository

A cloud team is creating a hardened image for a web server that will be deployed in a public cloud. The team wants to ensure that the image is secure and consistent across all deployments. Which combination of actions is most appropriate?

Harden the image but allow each deployment to be manually configured

Use a generic image and apply security settings after deployment

Harden the image, test it, and then use it as the only source for deployments

Use a hardened image but do not test it to save time

A security team maintains a golden image for a fleet of Linux servers. The team has a monthly patching cycle, but a critical vulnerability was announced that requires immediate patching. The team needs to update the golden image and redeploy affected servers quickly. What is the best approach?

Wait for the next monthly patching cycle to update the golden image

Patch the golden image, test it, and then redeploy all affected servers from the updated image

Update the golden image but do not redeploy existing servers

Apply the patch directly to all affected servers without updating the golden image

CiscoCertified Network Professional Cybersecurity (CBRCOR)

Domain 2Objective 2

2.2 Describe the Use of Hardening Machine Images for Deployment 350-201 Practice Questions (Page 6)

Part of the Techniques domain, which accounts for 30% of the 350-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~15–24 in this domain), expect 1–1 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

3concepts

30%of the exam

Questions 26–30

26application · medium
A system administrator is hardening a Linux image for a database server. The administrator wants to ensure that only necessary services are running and that the system is configured securely. Which action is most appropriate?
Select an answer first
27application · medium
A DevOps team is creating a Linux VM image for a web server fleet. They want to ensure that the image does not include any development tools or compilers that could be used to build exploits if the server is compromised. Which hardening technique directly addresses this concern?
Select an answer first
28foundation · easy
Which statement best describes the process of hardening a machine image?
Select an answer first
29application · medium
A cloud team is creating a hardened image for a web server that will be deployed in a public cloud. The team wants to ensure that the image is secure and consistent across all deployments. Which combination of actions is most appropriate?
Select an answer first
30expert · hard
A security team maintains a golden image for a fleet of Linux servers. The team has a monthly patching cycle, but a critical vulnerability was announced that requires immediate patching. The team needs to update the golden image and redeploy affected servers quickly. What is the best approach?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-201” is a trademark of its owner, used for identification only.