A company runs a custom web application on a Linux server. The application was developed in-house and has a history of SQL injection vulnerabilities. Which hardening measure would most directly mitigate this class of vulnerability?

Run the application as a non-root user

Disable error messages that reveal database details

Enable a web application firewall (WAF) in front of the application

Use parameterized queries and prepared statements in the application code

A Linux administrator is hardening a server. Which action is a recommended best practice for maintaining security over time?

Allowing root login over SSH for ease of administration

Applying security patches and updates on a regular schedule

Using the default configuration for all services

Disabling SELinux to improve application compatibility

A development team is deploying a web application that handles user-uploaded files. The security review recommends hardening the application against malicious file uploads. Which control is most effective?

Validate file type and size on the server side

Disable the upload feature entirely

Rely on client-side JavaScript validation

Store uploaded files in a public S3 bucket

CiscoCertified Network Professional Cybersecurity (CBRCOR)

Domain 2Objective 5

2.5 Determine Resources for Industry Standards and Recommendations for Hardening of Systems 350-201 Practice Questions (Page 2)

Part of the Techniques domain, which accounts for 30% of the 350-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~15–24 in this domain), expect 1–1 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

6concepts

30%of the exam

Questions 6–10

6application · medium
A company runs a custom web application on a Linux server. The application was developed in-house and has a history of SQL injection vulnerabilities. Which hardening measure would most directly mitigate this class of vulnerability?
Select an answer first
7foundation · easy
A Linux administrator is hardening a server. Which action is a recommended best practice for maintaining security over time?
Select an answer first
8foundation · easy
Which industry publication provides detailed security configuration checklists for a wide range of systems and is often used by U.S. federal agencies to meet compliance requirements?
Select an answer first
9foundation · easy
A company must harden its web servers to meet U.S. federal government compliance requirements. Which set of standards is most appropriate to apply?
Select an answer first
10application · medium
A development team is deploying a web application that handles user-uploaded files. The security review recommends hardening the application against malicious file uploads. Which control is most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-201” is a trademark of its owner, used for identification only.

2.5 Determine Resources for Industry Standards and Recommendations for Hardening of Systems 350-201 Practice Questions (Page 2)

Questions 6–10

A company runs a custom web application on a Linux server. The application was developed in-house and has a history of SQL injection vulnerabilities. Which hardening measure would most directly mitigate this class of vulnerability?

A Linux administrator is hardening a server. Which action is a recommended best practice for maintaining security over time?

Which industry publication provides detailed security configuration checklists for a wide range of systems and is often used by U.S. federal agencies to meet compliance requirements?

A company must harden its web servers to meet U.S. federal government compliance requirements. Which set of standards is most appropriate to apply?

A development team is deploying a web application that handles user-uploaded files. The security review recommends hardening the application against malicious file uploads. Which control is most effective?

Keep studying — Techniques