CiscoCertified Network Professional Cybersecurity (CBRCOR)
Domain 2Objective 9
2.9 Utilize Network Controls for Network Hardening 350-201 Practice Questions (Page 5)
Part of the Techniques domain, which accounts for 30% of the 350-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~15–24 in this domain), expect 1–1 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)
43questions here
9free pages
10concepts
30%of the exam
Questions 21–25
- 21
A network administrator is troubleshooting intermittent connectivity on a user segment. The segment has DHCP snooping enabled, but ARP spoofing is suspected because some hosts are receiving incorrect gateway MAC addresses. The administrator wants to validate ARP packets and also prevent hosts from spoofing IP addresses. Which two features should be enabled on the access switches?
Select an answer first - 22
Which protocol is recommended for secure remote management of a network device?
Select an answer first - 23
A security analyst is investigating a suspected brute-force attack on a network device. The analyst needs to determine the source IP addresses and the frequency of failed login attempts. Which action should be taken to support the investigation?
Select an answer first - 24
Which protocol is commonly used to securely transmit log messages from network devices to a central log server?
Select an answer first - 25
A financial services company has a remote branch office that connects to the headquarters over the internet. The traffic between the two sites includes sensitive customer data. The security policy requires that all traffic between the sites be encrypted and that the branch office be segmented from the guest network. What should be implemented?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-201” is a trademark of its owner, used for identification only.