After applying a security patch to a web server, what is the most reliable way to verify that the patch was installed correctly and mitigates the vulnerability?

Check the server's uptime to ensure it has not rebooted

Run a vulnerability scanner against the server to confirm the vulnerability is no longer detected

Verify that the server's IP address has not changed

Confirm that the server's firewall is still enabled

A vulnerability scanner reports that a Linux server is running OpenSSH 8.9p1, which is vulnerable to CVE-2023-38408. The server is only accessible via SSH from a management network. What is the most important additional information to determine if the server is exposed?

The operating system's kernel version

The total number of users with SSH access to the server

Whether the SSH service is listening on an interface reachable from the management network

The server's hostname and DNS records

A company plans to deploy a security patch to a fleet of point-of-sale (POS) terminals. The terminals are only used during store hours, and the patch requires a reboot. What is the best patching approach?

Deploy the patch to all terminals at once during store hours to minimize the time the vulnerability is present.

Test the patch on a few terminals, then deploy to the rest during the next scheduled maintenance window.

Skip the patch because the terminals are not internet-connected and the risk is low.

Deploy the patch only to terminals that have been recently used, and leave others unpatched.

After applying a security patch to a firewall, the security team wants to verify that the patch was applied correctly and that the firewall is still enforcing the security policy. Which action BEST verifies patch effectiveness?

Verify that the patch file is present on the firewall's storage

Check the firewall's firmware version and run a policy review or traffic test

Review the patch release notes and assume the patch is effective

Confirm that the firewall is still passing traffic

A company has a policy that all patches must be tested for at least one week in a staging environment. A new patch is released for a critical vulnerability in a widely used application. The patch is known to have a bug that causes memory leaks in certain configurations. The company's staging environment does not exactly match production because production uses a different database version. What should the company do?

Deploy the patch to production immediately because the vulnerability is critical, ignoring the known bug.

Skip the patch and rely on other security controls, since the patch has a known bug.

Wait for the vendor to release a fixed version of the patch, even if it takes weeks.

Update the staging environment to match production, test the patch for the required week, then deploy if no issues are found.

CiscoCertified Network Professional Cybersecurity (CBRCOR)

Domain 2Objective 6

2.6 Determine Patching Recommendations, Given a Scenario 350-201 Practice Questions (Page 2)

Part of the Techniques domain, which accounts for 30% of the 350-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~15–24 in this domain), expect 1–1 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

5concepts

30%of the exam

Questions 6–10

6foundation · easy
After applying a security patch to a web server, what is the most reliable way to verify that the patch was installed correctly and mitigates the vulnerability?
Select an answer first
7foundation · easy
A vulnerability scanner reports that a Linux server is running OpenSSH 8.9p1, which is vulnerable to CVE-2023-38408. The server is only accessible via SSH from a management network. What is the most important additional information to determine if the server is exposed?
Select an answer first
8application · medium
A company plans to deploy a security patch to a fleet of point-of-sale (POS) terminals. The terminals are only used during store hours, and the patch requires a reboot. What is the best patching approach?
Select an answer first
9application · medium
After applying a security patch to a firewall, the security team wants to verify that the patch was applied correctly and that the firewall is still enforcing the security policy. Which action BEST verifies patch effectiveness?
Select an answer first
10expert · hard
A company has a policy that all patches must be tested for at least one week in a staging environment. A new patch is released for a critical vulnerability in a widely used application. The patch is known to have a bug that causes memory leaks in certain configurations. The company's staging environment does not exactly match production because production uses a different database version. What should the company do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-201” is a trademark of its owner, used for identification only.