A vulnerability scanner flags a server as running an outdated version of a database software with a known privilege escalation vulnerability. The server is a domain controller that also runs a line-of-business application. The database software is not used by the application, but the application requires a specific version of a shared library that the database software depends on. The vendor's patch for the database software updates the shared library, which could break the application. What should the administrator do?

Do not apply the database patch because the application is more critical than the database vulnerability.

Apply the patch to the domain controller immediately because it is a high-value target.

Apply the database patch and then reinstall the application to ensure compatibility.

Test the patch in a staging environment that mirrors the domain controller and application setup, then decide.

A security analyst discovers that the company's web server is running Apache 2.4.41, which is vulnerable to CVE-2019-0211 (local privilege escalation). The server is behind a WAF, has no local user accounts, and is scheduled for decommissioning in two months. The analyst must recommend a patching action. What should the analyst recommend?

Remove the server from the network immediately and decommission it ahead of schedule

Apply the vendor patch immediately during the next maintenance window

Apply only the vendor's workaround configuration instead of the patch

Defer patching because the WAF mitigates the risk and the server is being decommissioned

A server runs a custom application that is only compatible with a specific version of an operating system library. The vendor has released a security patch for the library, but the patch updates the library to a newer version that may break the custom application. What should the administrator do?

Apply the patch and then recompile the custom application to work with the new library version.

Apply the patch to production immediately and monitor for issues, since the patch is from the vendor.

Test the patch in a staging environment that mirrors the production setup, then decide whether to apply it.

Do not apply the patch because the custom application is more important than security.

An organization has a public-facing web server with a critical remote code execution vulnerability that is being actively exploited. The patch requires a reboot, but the server is also running a batch job that runs every night and cannot be interrupted. The batch job takes 6 hours and runs from 2 AM to 8 AM. The server can be rebooted at any other time. What should the organization do?

Apply the patch immediately and interrupt the batch job, since the vulnerability is critical.

Do not apply the patch because the batch job is more important than security.

Wait until the batch job completes, then apply the patch and reboot the server.

Apply the patch without rebooting, assuming the patch takes effect immediately.

A security administrator is planning to deploy a critical security patch to a production application server. Which practice is essential to follow before applying the patch to production?

Notify all users to save their work and log off before the patch is applied

Apply the patch immediately without testing to reduce the window of exposure

Disable the server's firewall to ensure the patch installs correctly

Test the patch in a non-production environment that mirrors the production configuration

CiscoCertified Network Professional Cybersecurity (CBRCOR)

Domain 2Objective 6

2.6 Determine Patching Recommendations, Given a Scenario 350-201 Practice Questions (Page 4)

Part of the Techniques domain, which accounts for 30% of the 350-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~15–24 in this domain), expect 1–1 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

5concepts

30%of the exam

Questions 16–20

16expert · hard
A vulnerability scanner flags a server as running an outdated version of a database software with a known privilege escalation vulnerability. The server is a domain controller that also runs a line-of-business application. The database software is not used by the application, but the application requires a specific version of a shared library that the database software depends on. The vendor's patch for the database software updates the shared library, which could break the application. What should the administrator do?
Select an answer first
17application · medium
A security analyst discovers that the company's web server is running Apache 2.4.41, which is vulnerable to CVE-2019-0211 (local privilege escalation). The server is behind a WAF, has no local user accounts, and is scheduled for decommissioning in two months. The analyst must recommend a patching action. What should the analyst recommend?
Select an answer first
18application · medium
A server runs a custom application that is only compatible with a specific version of an operating system library. The vendor has released a security patch for the library, but the patch updates the library to a newer version that may break the custom application. What should the administrator do?
Select an answer first
19expert · hard
An organization has a public-facing web server with a critical remote code execution vulnerability that is being actively exploited. The patch requires a reboot, but the server is also running a batch job that runs every night and cannot be interrupted. The batch job takes 6 hours and runs from 2 AM to 8 AM. The server can be rebooted at any other time. What should the organization do?
Select an answer first
20foundation · easy
A security administrator is planning to deploy a critical security patch to a production application server. Which practice is essential to follow before applying the patch to production?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-201” is a trademark of its owner, used for identification only.

2.6 Determine Patching Recommendations, Given a Scenario 350-201 Practice Questions (Page 4)

Questions 16–20

A server runs a custom application that is only compatible with a specific version of an operating system library. The vendor has released a security patch for the library, but the patch updates the library to a newer version that may break the custom application. What should the administrator do?

A security administrator is planning to deploy a critical security patch to a production application server. Which practice is essential to follow before applying the patch to production?

Keep studying — Techniques