Which operating system hardening practice is most effective in reducing the attack surface of a Windows server?

Setting the password policy to allow shorter passwords for convenience

Disabling unnecessary services and removing unused roles and features

Enabling Windows Firewall only for the public profile

Installing all available optional features to ensure full functionality

A network administrator is hardening a new Cisco router that will be deployed at a branch office. The router will be managed remotely. Which configuration change is most critical to prevent unauthorized administrative access?

Configure an ACL that permits only management station IPs to access SSH

Set a strong enable secret password

Enable SNMPv3 with authentication and encryption

A network administrator is hardening a Cisco switch that connects to multiple VLANs. The switch is managed via SNMP. Which configuration change is most aligned with industry hardening recommendations?

Change SNMP community strings to strong values and restrict SNMP access to management hosts

Use SNMPv1 for compatibility with older monitoring tools

Enable SNMP with the default community string 'public'

Disable SNMP entirely and use only console access for monitoring

CiscoCertified Network Professional Cybersecurity (CBRCOR)

Domain 2Objective 5

2.5 Determine Resources for Industry Standards and Recommendations for Hardening of Systems 350-201 Practice Questions (Page 8)

Part of the Techniques domain, which accounts for 30% of the 350-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~15–24 in this domain), expect 1–1 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

6concepts

30%of the exam

Questions 36–39

36foundation · easy
Which operating system hardening practice is most effective in reducing the attack surface of a Windows server?
Select an answer first
37application · medium
A network administrator is hardening a new Cisco router that will be deployed at a branch office. The router will be managed remotely. Which configuration change is most critical to prevent unauthorized administrative access?
Select an answer first
38foundation · easy
An organization processes credit card payments and must harden its systems to comply with industry regulations. Which hardening standard is most directly applicable?
Select an answer first
39application · medium
A network administrator is hardening a Cisco switch that connects to multiple VLANs. The switch is managed via SNMP. Which configuration change is most aligned with industry hardening recommendations?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to 350-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-201” is a trademark of its owner, used for identification only.

2.5 Determine Resources for Industry Standards and Recommendations for Hardening of Systems 350-201 Practice Questions (Page 8)

Questions 36–39

Which operating system hardening practice is most effective in reducing the attack surface of a Windows server?

A network administrator is hardening a new Cisco router that will be deployed at a branch office. The router will be managed remotely. Which configuration change is most critical to prevent unauthorized administrative access?

An organization processes credit card payments and must harden its systems to comply with industry regulations. Which hardening standard is most directly applicable?

A network administrator is hardening a Cisco switch that connects to multiple VLANs. The switch is managed via SNMP. Which configuration change is most aligned with industry hardening recommendations?

Keep studying — Techniques