A company is implementing MFA for all users. They have a mix of remote and on-premises users. Some users have company-issued smartphones, and others do not. Which MFA method would be most secure and practical for all users?

Use email-based one-time codes for all users

Require all users to install a mobile app on their personal devices

Use a hardware token for users without smartphones and a mobile app for users with smartphones

Use SMS-based one-time codes for all users

What is the primary purpose of conducting simulated phishing exercises in an organization?

To identify employees who are not productive

To block all incoming emails from external sources

To train employees to recognize and report phishing attempts

To test the performance of email servers

A company has a mature email security solution that blocks most phishing emails. However, a recent spear-phishing campaign targeted the finance team and successfully tricked an employee into transferring funds. The email used a legitimate-looking domain and passed all filters. The company wants to add a control that would have the highest impact on preventing this type of loss. Which control should they implement?

Deploy an advanced email gateway with sandboxing and URL reputation

Require out-of-band verification for all wire transfers and changes to vendor payment details

Implement data loss prevention (DLP) to block emails containing financial data

Increase the frequency of simulated phishing exercises to weekly

A company has a high rate of employees clicking on simulated phishing emails. The security team wants to reduce this behavior. Which approach would be most effective?

Increase the frequency of simulated phishing emails to once a day

Block all external email to prevent phishing from reaching users

Disable all links in emails and require users to type URLs manually

Implement a continuous security awareness training program with regular simulated phishing exercises

CiscoCertified Network Professional Security

Domain 1Objective 4

1.4 Describe the Controls Used to Protect Against Phishing and Social Engineering Attacks 350-701 Practice Questions (Page 1)

Part of the Security Concepts domain, which accounts for 20% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

7concepts

20%of the exam

Questions 1–5

1expert · hard
A company is implementing MFA for all users. They have a mix of remote and on-premises users. Some users have company-issued smartphones, and others do not. Which MFA method would be most secure and practical for all users?
Select an answer first
2foundation · easy
Which authentication control adds an additional layer of security beyond a username and password?
Select an answer first
3foundation · easy
What is the primary purpose of conducting simulated phishing exercises in an organization?
Select an answer first
4expert · hard
A company has a mature email security solution that blocks most phishing emails. However, a recent spear-phishing campaign targeted the finance team and successfully tricked an employee into transferring funds. The email used a legitimate-looking domain and passed all filters. The company wants to add a control that would have the highest impact on preventing this type of loss. Which control should they implement?
Select an answer first
5application · medium
A company has a high rate of employees clicking on simulated phishing emails. The security team wants to reduce this behavior. Which approach would be most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.

1.4 Describe the Controls Used to Protect Against Phishing and Social Engineering Attacks 350-701 Practice Questions (Page 1)

Questions 1–5

A company is implementing MFA for all users. They have a mix of remote and on-premises users. Some users have company-issued smartphones, and others do not. Which MFA method would be most secure and practical for all users?

Which authentication control adds an additional layer of security beyond a username and password?

What is the primary purpose of conducting simulated phishing exercises in an organization?

A company has a high rate of employees clicking on simulated phishing emails. The security team wants to reduce this behavior. Which approach would be most effective?

Keep studying — Security Concepts