A multinational company is moving its customer relationship management (CRM) system to a public cloud. The company must comply with GDPR, which requires protecting personal data. The security team is deciding between using a single cloud region or multiple regions for redundancy. Which approach best balances compliance and availability?

Use multiple regions within the EU but disable encryption to improve performance

Use a single region outside the EU but encrypt all data

Use a single cloud region that is located in the EU and enable encryption and access controls

Use multiple regions outside the EU for better availability

A system administrator is hardening a new Windows 10 workstation for a user who only needs to browse the web and use Microsoft Office. Which configuration is most appropriate?

Install all applications with administrator privileges

Disable Windows Defender Firewall

Enable Remote Desktop for remote support

Run the user with a standard (non-administrator) account

Which practice is a recommended hardening measure for network devices such as routers and switches?

Disabling password encryption on the device configuration

Leaving default community strings in place for SNMP

Using SNMPv3 with authentication and encryption

Enabling Telnet for remote management

A Linux administrator is hardening a new Ubuntu 22.04 server that will host a public-facing web application. The server was installed with default packages. Which action is the most effective first step to reduce the attack surface?

Configure a host-based firewall to allow only ports 80 and 443

Remove or disable all unnecessary services and packages

Enable automatic security updates

Change the SSH port to a non-default value

CiscoCertified Network Professional Cybersecurity (CBRCOR)

Domain 2Objective 5

2.5 Determine Resources for Industry Standards and Recommendations for Hardening of Systems 350-201 Practice Questions (Page 6)

Part of the Techniques domain, which accounts for 30% of the 350-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~15–24 in this domain), expect 1–1 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

6concepts

30%of the exam

Questions 26–30

26foundation · easy
A security engineer is looking for a vendor-neutral, consensus-based set of configuration guidelines for hardening a Linux server. Which resource is specifically designed for this purpose?
Select an answer first
27expert · hard
A multinational company is moving its customer relationship management (CRM) system to a public cloud. The company must comply with GDPR, which requires protecting personal data. The security team is deciding between using a single cloud region or multiple regions for redundancy. Which approach best balances compliance and availability?
Select an answer first
28application · medium
A system administrator is hardening a new Windows 10 workstation for a user who only needs to browse the web and use Microsoft Office. Which configuration is most appropriate?
Select an answer first
29foundation · easy
Which practice is a recommended hardening measure for network devices such as routers and switches?
Select an answer first
30application · medium
A Linux administrator is hardening a new Ubuntu 22.04 server that will host a public-facing web application. The server was installed with default packages. Which action is the most effective first step to reduce the attack surface?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-201” is a trademark of its owner, used for identification only.

2.5 Determine Resources for Industry Standards and Recommendations for Hardening of Systems 350-201 Practice Questions (Page 6)

Questions 26–30

A security engineer is looking for a vendor-neutral, consensus-based set of configuration guidelines for hardening a Linux server. Which resource is specifically designed for this purpose?

A system administrator is hardening a new Windows 10 workstation for a user who only needs to browse the web and use Microsoft Office. Which configuration is most appropriate?

Which practice is a recommended hardening measure for network devices such as routers and switches?

A Linux administrator is hardening a new Ubuntu 22.04 server that will host a public-facing web application. The server was installed with default packages. Which action is the most effective first step to reduce the attack surface?

Keep studying — Techniques