A security analyst is investigating a data exfiltration incident. The analyst suspects that an attacker used a compromised management interface to transfer data out of the network. The analyst needs to determine which commands were executed on the network device and when. Which logging mechanism should be used?

Enable syslog logging of authentication events only.

Enable AAA accounting on the device to log all commands executed by administrators.

Enable SNMP traps on the device.

A company has a conference room with a wall jack that employees plug personal devices into during meetings. The security team wants to prevent unauthorized devices from connecting while allowing the IT-issued laptop of the conference room presenter to connect. The laptop's MAC address is known. What should the administrator configure on the switch port?

Port security with 'sticky' MAC learning and violation mode 'restrict'

IP Source Guard with a static IP-MAC binding

Port security with a static MAC address and violation mode 'shutdown'

DHCP snooping with a static binding for the laptop

What is the primary purpose of network monitoring and logging?

To detect anomalies and support forensic analysis

To replace the need for firewalls

To block all malicious traffic automatically

A financial company is transmitting sensitive data between two branch offices over the internet. The security team wants to ensure confidentiality and integrity of the data in transit. They also want to restrict which hosts can communicate across the VPN. Which solution should be implemented?

Deploy an IPsec VPN between the branch routers and apply ACLs to limit the traffic that can traverse the tunnel.

Deploy a TLS VPN using a web browser and require client certificates.

Segment the network with VLANs and use ACLs on the routers.

Use SSH tunneling between the branch routers.

A network administrator needs to block all traffic from the 192.168.10.0/24 subnet to the 10.10.10.0/24 subnet on port 445, but allow all other traffic between these subnets. The ACL will be applied to the interface facing the 192.168.10.0/24 subnet. Which ACL configuration should be used?

deny tcp 192.168.10.0 0.0.0.255 10.10.10.0 0.0.0.255 eq 445; permit ip any any

permit tcp 192.168.10.0 0.0.0.255 10.10.10.0 0.0.0.255 eq 445; deny ip any any

deny tcp any any eq 445; permit ip any any

deny ip 192.168.10.0 0.0.0.255 10.10.10.0 0.0.0.255; permit ip any any

CiscoCertified Network Professional Cybersecurity (CBRCOR)

Domain 2Objective 9

2.9 Utilize Network Controls for Network Hardening 350-201 Practice Questions (Page 6)

Part of the Techniques domain, which accounts for 30% of the 350-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~15–24 in this domain), expect 1–1 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

10concepts

30%of the exam

Questions 26–30

26expert · hard
A security analyst is investigating a data exfiltration incident. The analyst suspects that an attacker used a compromised management interface to transfer data out of the network. The analyst needs to determine which commands were executed on the network device and when. Which logging mechanism should be used?
Select an answer first
27application · medium
A company has a conference room with a wall jack that employees plug personal devices into during meetings. The security team wants to prevent unauthorized devices from connecting while allowing the IT-issued laptop of the conference room presenter to connect. The laptop's MAC address is known. What should the administrator configure on the switch port?
Select an answer first
28foundation · easy
What is the primary purpose of network monitoring and logging?
Select an answer first
29application · medium
A financial company is transmitting sensitive data between two branch offices over the internet. The security team wants to ensure confidentiality and integrity of the data in transit. They also want to restrict which hosts can communicate across the VPN. Which solution should be implemented?
Select an answer first
30application · medium
A network administrator needs to block all traffic from the 192.168.10.0/24 subnet to the 10.10.10.0/24 subnet on port 445, but allow all other traffic between these subnets. The ACL will be applied to the interface facing the 192.168.10.0/24 subnet. Which ACL configuration should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-201” is a trademark of its owner, used for identification only.

2.9 Utilize Network Controls for Network Hardening 350-201 Practice Questions (Page 6)

Questions 26–30

What is the primary purpose of network monitoring and logging?

A financial company is transmitting sensitive data between two branch offices over the internet. The security team wants to ensure confidentiality and integrity of the data in transit. They also want to restrict which hosts can communicate across the VPN. Which solution should be implemented?

A network administrator needs to block all traffic from the 192.168.10.0/24 subnet to the 10.10.10.0/24 subnet on port 445, but allow all other traffic between these subnets. The ACL will be applied to the interface facing the 192.168.10.0/24 subnet. Which ACL configuration should be used?

Keep studying — Techniques