After a user reports a suspected phishing email, what is a common next step in the incident response process?

Ignore the report if no malware was detected

Send a warning email to all employees

Block the sender and analyze the email for indicators of compromise

Immediately shut down the entire network

A user receives a text message that appears to be from their bank, stating their account has been locked and asking them to click a link to verify their identity. The link leads to a fake banking website. Which type of phishing attack is this, and what control would best mitigate it?

Phishing; deploy an anti-malware solution on the user's phone

Smishing; use mobile threat defense (MTD) and web filtering to block malicious links

Spear phishing; enforce MFA for all banking transactions

Vishing; implement email filtering to block the message

A company's finance team received a spear-phishing email that tricked an employee into entering their credentials on a fake login page. The attacker is now attempting to log in from a different country. Which control would most likely prevent the attacker from gaining access?

Security awareness training that teaches users to hover over links

Email filtering that quarantines messages with suspicious links

Multi-factor authentication (MFA) that requires a one-time code from a mobile app

Incident reporting procedures that require users to report suspicious emails

CiscoCertified Network Professional Security

Domain 1Objective 4

1.4 Describe the Controls Used to Protect Against Phishing and Social Engineering Attacks 350-701 Practice Questions (Page 4)

Part of the Security Concepts domain, which accounts for 20% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

7concepts

20%of the exam

Questions 16–20

16foundation · easy
After a user reports a suspected phishing email, what is a common next step in the incident response process?
Select an answer first
17application · medium
A user receives a text message that appears to be from their bank, stating their account has been locked and asking them to click a link to verify their identity. The link leads to a fake banking website. Which type of phishing attack is this, and what control would best mitigate it?
Select an answer first
18foundation · easy
An attacker calls an employee, pretending to be from IT support, and asks the employee to provide their password to 'fix a network issue'. Which social engineering technique is being used?
Select an answer first
19application · medium
A company's finance team received a spear-phishing email that tricked an employee into entering their credentials on a fake login page. The attacker is now attempting to log in from a different country. Which control would most likely prevent the attacker from gaining access?
Select an answer first
20foundation · easy
An attacker leaves a USB drive labeled 'Employee Bonus' in the company parking lot, hoping an employee will plug it into a work computer. Which social engineering technique is this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.

1.4 Describe the Controls Used to Protect Against Phishing and Social Engineering Attacks 350-701 Practice Questions (Page 4)

Questions 16–20

After a user reports a suspected phishing email, what is a common next step in the incident response process?

A user receives a text message that appears to be from their bank, stating their account has been locked and asking them to click a link to verify their identity. The link leads to a fake banking website. Which type of phishing attack is this, and what control would best mitigate it?

An attacker calls an employee, pretending to be from IT support, and asks the employee to provide their password to 'fix a network issue'. Which social engineering technique is being used?

A company's finance team received a spear-phishing email that tricked an employee into entering their credentials on a fake login page. The attacker is now attempting to log in from a different country. Which control would most likely prevent the attacker from gaining access?

An attacker leaves a USB drive labeled 'Employee Bonus' in the company parking lot, hoping an employee will plug it into a work computer. Which social engineering technique is this?

Keep studying — Security Concepts