CiscoCertified Network Professional Security
Domain 2Objective 5
2.5 Describe CIS Benchmarks for Hardening Devices Such as Cisco Secure Firewall (FTD) and Cisco IOS XE 350-701 Practice Questions (Page 2)
Part of the Network Security domain, which accounts for 25% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)
29questions here
6free pages
6concepts
25%of the exam
Questions 6–10
- 6
A compliance auditor is verifying that a Cisco FTD device conforms to the CIS Benchmark. The auditor needs to confirm that the management plane is secured. Which set of commands or configuration reviews would provide the most comprehensive evidence of compliance?
Select an answer first - 7
A security team is applying CIS Benchmarks to both Cisco FTD and IOS XE devices. The team has limited resources and must prioritize the most impactful recommendations. The team has identified the following potential actions: disabling unused services, enabling logging, configuring AAA, and restricting management access. Which action should be prioritized first to reduce the attack surface?
Select an answer first - 8
A security auditor needs to verify that a Cisco FTD device conforms to CIS Benchmark recommendations for secure management access. Which approach is most appropriate?
Select an answer first - 9
Which of the following is a key CIS Benchmark recommendation for hardening management interfaces on a Cisco IOS XE device?
Select an answer first - 10
A security engineer is applying CIS Benchmark recommendations to a Cisco FTD device. The engineer has completed the following actions: disabled the HTTP server, enabled SSH, configured AAA, and restricted management access. The engineer now needs to verify that the device is compliant. Which additional action should the engineer take to ensure comprehensive compliance verification?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.