A security analyst is reviewing the TLS configuration of a web server. The server supports TLS 1.0, 1.1, and 1.2, and uses RC4 and 3DES ciphers. The analyst is concerned about the security of data in transit. Which action should the analyst take to improve security?

Use a stronger certificate but keep the same protocols.

Keep RC4 enabled but disable 3DES.

Enable TLS 1.3 and keep TLS 1.0 enabled for compatibility.

Disable TLS 1.0 and 1.1, and disable RC4 and 3DES ciphers.

A developer is writing a C function that copies user input into a fixed-size buffer without checking the length. The application is exposed to the internet. Which vulnerability is most likely to be exploited, and what is the primary mitigation?

SQL injection; use parameterized queries.

Buffer overflow; use bounds checking and safe functions like strncpy.

Cross-site scripting; encode output.

Path traversal; validate and sanitize file paths.

CiscoCertified Network Professional Security

Domain 1Objective 2

forgery, SQL Injection, and Identification and Prioritization Using CVEs and CVSS Scores 350-701 Practice Questions (Page 1)

Part of the Security Concepts domain, which accounts for 20% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

10concepts

20%of the exam

Questions 1–5

1foundation · easy
Which type of XSS attack is reflected immediately in the response without being stored on the server?
Select an answer first
2foundation · easy
Which attack technique is most commonly used to exploit weak passwords?
Select an answer first
3expert · medium
A security analyst is reviewing the TLS configuration of a web server. The server supports TLS 1.0, 1.1, and 1.2, and uses RC4 and 3DES ciphers. The analyst is concerned about the security of data in transit. Which action should the analyst take to improve security?
Select an answer first
4foundation · easy
Which input sequence is commonly used in a path traversal attack to move up directories?
Select an answer first
5application · medium
A developer is writing a C function that copies user input into a fixed-size buffer without checking the length. The application is exposed to the internet. Which vulnerability is most likely to be exploited, and what is the primary mitigation?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.

Questions 1–5

Which type of XSS attack is reflected immediately in the response without being stored on the server?

Which attack technique is most commonly used to exploit weak passwords?

A security analyst is reviewing the TLS configuration of a web server. The server supports TLS 1.0, 1.1, and 1.2, and uses RC4 and 3DES ciphers. The analyst is concerned about the security of data in transit. Which action should the analyst take to improve security?

Which input sequence is commonly used in a path traversal attack to move up directories?

A developer is writing a C function that copies user input into a fixed-size buffer without checking the length. The application is exposed to the internet. Which vulnerability is most likely to be exploited, and what is the primary mitigation?

Keep studying — Security Concepts