A financial services company is hardening a web application that processes loan applications. The application runs on a Windows server and uses a SQL database. The security team must balance strong security with application performance. Which hardening measure is most appropriate to implement first?

Disable all application logging to improve performance

Enable full disk encryption on the server

Run the application with the highest privileges to avoid permission errors

Implement input validation and parameterized queries to prevent injection attacks

A small business with no dedicated security staff needs to harden its Windows 10 workstations. The owner wants a practical, low-maintenance approach that addresses the most common risks. Which recommendation should a consultant give?

Implement a full DISA STIG configuration for every workstation

Disable Windows Defender and rely on third-party antivirus

Set all users as local administrators to avoid permission prompts

Enable automatic updates and use standard user accounts for daily work

A Linux server hosts a web application that is critical to business operations. The application requires a specific older version of a library that has known vulnerabilities. The vendor will not support the application if the library is updated. The security team must decide how to handle this situation. Which action is the most balanced approach?

Ignore the vulnerability because the application is critical

Implement compensating controls such as a WAF and network segmentation, and document the risk

Remove the application from the network to eliminate the risk

Update the library anyway and hope the application still works

A company is hardening a Linux server that hosts a public-facing web application. The server is in a DMZ. Which hardening measure is most effective in reducing the risk of a web server compromise?

Run the web server as root for easier file access

Keep the web server software and OS patched with the latest security updates

Allow all outbound traffic from the server

Disable the system logging service to save disk space

A security team is hardening a custom application that accepts user input and stores it in a database. Which coding practice is most effective in preventing SQL injection?

Use a blacklist of dangerous SQL keywords

Disable error messages to hide database details

Concatenate user input directly into SQL strings

Use parameterized queries or prepared statements

CiscoCertified Network Professional Cybersecurity (CBRCOR)

Domain 2Objective 5

2.5 Determine Resources for Industry Standards and Recommendations for Hardening of Systems 350-201 Practice Questions (Page 7)

Part of the Techniques domain, which accounts for 30% of the 350-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~15–24 in this domain), expect 1–1 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

6concepts

30%of the exam

Questions 31–35

31expert · hard
A financial services company is hardening a web application that processes loan applications. The application runs on a Windows server and uses a SQL database. The security team must balance strong security with application performance. Which hardening measure is most appropriate to implement first?
Select an answer first
32application · medium
A small business with no dedicated security staff needs to harden its Windows 10 workstations. The owner wants a practical, low-maintenance approach that addresses the most common risks. Which recommendation should a consultant give?
Select an answer first
33expert · hard
A Linux server hosts a web application that is critical to business operations. The application requires a specific older version of a library that has known vulnerabilities. The vendor will not support the application if the library is updated. The security team must decide how to handle this situation. Which action is the most balanced approach?
Select an answer first
34application · medium
A company is hardening a Linux server that hosts a public-facing web application. The server is in a DMZ. Which hardening measure is most effective in reducing the risk of a web server compromise?
Select an answer first
35application · medium
A security team is hardening a custom application that accepts user input and stores it in a database. Which coding practice is most effective in preventing SQL injection?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-201” is a trademark of its owner, used for identification only.

2.5 Determine Resources for Industry Standards and Recommendations for Hardening of Systems 350-201 Practice Questions (Page 7)

Questions 31–35

A small business with no dedicated security staff needs to harden its Windows 10 workstations. The owner wants a practical, low-maintenance approach that addresses the most common risks. Which recommendation should a consultant give?

A company is hardening a Linux server that hosts a public-facing web application. The server is in a DMZ. Which hardening measure is most effective in reducing the risk of a web server compromise?

A security team is hardening a custom application that accepts user input and stores it in a database. Which coding practice is most effective in preventing SQL injection?

Keep studying — Techniques