An organization's security policy requires that all administrative access to network devices be encrypted. A review finds that the network administrator uses Telnet to manage a router. What is the most appropriate control improvement?

Restrict Telnet access to a specific management subnet.

Replace Telnet with SSH for device management.

Add a strong password to the Telnet configuration.

Implement an access control list (ACL) on the router.

A company's security team is reviewing the effectiveness of its endpoint protection. The EDR solution is installed on all laptops and servers, but the team discovers that the EDR's behavioral analysis module is disabled on all endpoints due to a performance concern. The security policy requires behavioral analysis to be enabled. What should the team do to align the control with the policy?

Uninstall the EDR from endpoints that experience performance issues.

Update the security policy to remove the behavioral analysis requirement.

Leave the module disabled and rely on signature-based detection only.

Enable the behavioral analysis module on all endpoints and monitor for performance impact.

A security team is evaluating the effectiveness of their network segmentation control. They find that the firewall rules between the DMZ and the internal network are overly permissive, allowing all traffic from the DMZ to the internal network. The security policy requires that only specific services be allowed. What is the most appropriate recommendation?

Move all DMZ servers to the internal network.

Rewrite the firewall rules to allow only required services and deny all other traffic.

Keep the current rules because they are easier to manage.

Disable the firewall between the DMZ and internal network.

Which activity is part of evaluating the effectiveness of a security control?

Determining the cost of the control

Identifying the owner of the control

Verifying that the control is implemented as designed and operates as expected

Documenting the control in a risk register

A company's security team is prioritizing recommendations from a gap analysis. They have identified three issues: (1) lack of encryption on internal database replication, (2) missing MFA for a legacy application used by a small group of users, and (3) no logging on a development server. The company has a limited budget and must address the highest-risk issue first. Which issue should be prioritized?

Lack of encryption on internal database replication

All issues are equally important and should be addressed together

No logging on a development server

Missing MFA for a legacy application

CiscoCertified Network Professional Cybersecurity (CBRCOR)

Domain 2Objective 4

2.4 Evaluate the Security Controls of an Environment, Diagnose Gaps, and Recommend Improvement 350-201 Practice Questions (Page 2)

Part of the Techniques domain, which accounts for 30% of the 350-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~15–24 in this domain), expect 1–1 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

3concepts

30%of the exam

Questions 6–10

6application · easy
An organization's security policy requires that all administrative access to network devices be encrypted. A review finds that the network administrator uses Telnet to manage a router. What is the most appropriate control improvement?
Select an answer first
7application · medium
A company's security team is reviewing the effectiveness of its endpoint protection. The EDR solution is installed on all laptops and servers, but the team discovers that the EDR's behavioral analysis module is disabled on all endpoints due to a performance concern. The security policy requires behavioral analysis to be enabled. What should the team do to align the control with the policy?
Select an answer first
8application · medium
A security team is evaluating the effectiveness of their network segmentation control. They find that the firewall rules between the DMZ and the internal network are overly permissive, allowing all traffic from the DMZ to the internal network. The security policy requires that only specific services be allowed. What is the most appropriate recommendation?
Select an answer first
9foundation · easy
Which activity is part of evaluating the effectiveness of a security control?
Select an answer first
10expert · hard
A company's security team is prioritizing recommendations from a gap analysis. They have identified three issues: (1) lack of encryption on internal database replication, (2) missing MFA for a legacy application used by a small group of users, and (3) no logging on a development server. The company has a limited budget and must address the highest-risk issue first. Which issue should be prioritized?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-201” is a trademark of its owner, used for identification only.

2.4 Evaluate the Security Controls of an Environment, Diagnose Gaps, and Recommend Improvement 350-201 Practice Questions (Page 2)

Questions 6–10

An organization's security policy requires that all administrative access to network devices be encrypted. A review finds that the network administrator uses Telnet to manage a router. What is the most appropriate control improvement?

Which activity is part of evaluating the effectiveness of a security control?

Keep studying — Techniques