CiscoCertified Network Professional Cybersecurity (CBRCOR)
Domain 2Objective 7
2.7 Recommend Services to Disable, Given a Scenario 350-201 Practice Questions (Page 6)
Part of the Techniques domain, which accounts for 30% of the 350-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~15–24 in this domain), expect 1–1 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)
30questions here
6free pages
5concepts
30%of the exam
Questions 26–30
- 26
A retail company has a point-of-sale (POS) server that runs a payment processing application, a database, and a remote desktop service for the IT support team. The server also has a Bluetooth service enabled, but no Bluetooth devices are used with this server. What should the administrator do?
Select an answer first - 27
A hotel chain has a server that runs a reservation system and also has the following services enabled: Telnet, SNMP, and a print spooler. The Telnet service is used by a vendor for remote diagnostics, but the vendor is migrating to SSH next month. The SNMP service is used for monitoring and is not exposed to the internet. The print spooler is used by a single printer in the lobby. The security team wants to disable unnecessary services. Which service should be disabled?
Select an answer first - 28
A restaurant chain has a server that runs a loyalty program database and also has a legacy SNMP service enabled for device monitoring. The SNMP service is not used because the monitoring system was replaced by a modern agent. The SNMP service is not exposed to the internet. The security team wants to disable unnecessary services. Which service should be disabled?
Select an answer first - 29
A network device has the following services enabled: SSH (used for management), SNMP (used for monitoring), and TFTP (used for backup, but backups are now performed via a secure backup server). Which service should be recommended for disabling first?
Select an answer first - 30
A regional bank has a core banking server that runs a transaction processing system. The server also has the following services enabled: SNMP (read-only community string 'monitor'), FTP (used by a third-party auditor to upload reports), and RDP (used by IT administrators for remote management). The SNMP service is exposed to the internet, and the FTP service is restricted to a specific auditor IP. The RDP service is also exposed to the internet and has experienced multiple brute-force attempts. The bank's compliance team requires that the auditor be able to upload reports via FTP, and the IT team requires RDP for remote management. The security team must reduce risk while maintaining compliance and operational requirements. Which action should the security team take?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
No more pagesBack to 350-201
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-201” is a trademark of its owner, used for identification only.