Which programming practice is most effective in preventing buffer overflow vulnerabilities?

Disabling error messages on the server.

Implementing role-based access control.

Using bounds-checking functions and validating input lengths.

Using strong encryption for all data in transit.

A network administrator discovers that a network device has a default password that was never changed. An attacker could easily guess this password and gain administrative access. Which vulnerability is this, and what is the immediate remediation?

Weak encryption cipher; upgrade to a stronger cipher.

Path traversal; sanitize input.

Hardcoded password; change the password to a strong, unique value.

A user is logged into their online banking account. While browsing another site, they click on a link that triggers a request to transfer funds from their account to the attacker. The banking site does not verify the origin of the request. Which vulnerability is being exploited, and what is the most effective mitigation?

SQL injection; use prepared statements.

CSRF; use anti-CSRF tokens and validate the Origin header.

Path traversal; validate file paths.

What is the primary impact of a stored cross-site scripting (XSS) attack?

The attacker can bypass network firewalls.

The attacker can modify the database schema.

The attacker gains direct access to the server's file system.

Malicious script is permanently stored on the target server and executed when other users view the page.

Which OWASP Top Ten risk is characterized by an application failing to properly restrict what authenticated users are allowed to do?

Security Logging and Monitoring Failures

CiscoCertified Network Professional Security

Domain 1Objective 2

forgery, SQL Injection, and Identification and Prioritization Using CVEs and CVSS Scores 350-701 Practice Questions (Page 5)

Part of the Security Concepts domain, which accounts for 20% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

10concepts

20%of the exam

Questions 21–25

21foundation · easy
Which programming practice is most effective in preventing buffer overflow vulnerabilities?
Select an answer first
22application · medium
A network administrator discovers that a network device has a default password that was never changed. An attacker could easily guess this password and gain administrative access. Which vulnerability is this, and what is the immediate remediation?
Select an answer first
23application · medium
A user is logged into their online banking account. While browsing another site, they click on a link that triggers a request to transfer funds from their account to the attacker. The banking site does not verify the origin of the request. Which vulnerability is being exploited, and what is the most effective mitigation?
Select an answer first
24foundation · easy
What is the primary impact of a stored cross-site scripting (XSS) attack?
Select an answer first
25foundation · easy
Which OWASP Top Ten risk is characterized by an application failing to properly restrict what authenticated users are allowed to do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.

Questions 21–25

Which programming practice is most effective in preventing buffer overflow vulnerabilities?

A network administrator discovers that a network device has a default password that was never changed. An attacker could easily guess this password and gain administrative access. Which vulnerability is this, and what is the immediate remediation?

What is the primary impact of a stored cross-site scripting (XSS) attack?

Which OWASP Top Ten risk is characterized by an application failing to properly restrict what authenticated users are allowed to do?

Keep studying — Security Concepts