Which threat is considered a cloud-specific risk due to the shared responsibility model?

Insider threats from cloud provider employees

A company's security team is evaluating the risk of AI-generated deepfake audio being used to impersonate the CEO in a vishing attack. Which mitigation is most effective?

Use a voice recognition system to verify callers

Disable all phone-based financial transactions

Implement multi-factor authentication (MFA) for all financial transactions

Train employees to recognize deepfake audio

How can an attacker exploit excessive data exposure in an API?

By calling an API endpoint that returns more data than necessary, revealing sensitive information

By intercepting network traffic to read API responses

By sending a large number of requests to overwhelm the API

By injecting malicious code into API requests

How does a trojan typically infect a system?

By tricking the user into running a malicious program disguised as legitimate software

By attaching to an executable file and waiting for it to be run

By exploiting a network vulnerability without user interaction

By automatically spreading through email contacts

CiscoCertified Network Professional Security

Domain 1Objective 1

1.1 Explain Attack Threats Against On-Premises, Hybrid, and Cloud Environments Such as Viruses, Trojans, DoS/DDoS, Phishing, Rootkits, Man-In-The Middle, Malware, Data Breaches, Insecure APIs, Compromised Credentials, PQC, and AI 350-701 Practice Questions (Page 5)

Part of the Security Concepts domain, which accounts for 20% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

14concepts

20%of the exam

Questions 21–25

21foundation · easy
Which threat is considered a cloud-specific risk due to the shared responsibility model?
Select an answer first
22expert · hard
A company's security team is evaluating the risk of AI-generated deepfake audio being used to impersonate the CEO in a vishing attack. Which mitigation is most effective?
Select an answer first
23foundation · easy
How can an attacker exploit excessive data exposure in an API?
Select an answer first
24application · medium
A company's on-premises data center has a legacy server running an outdated operating system. The server is not patched because the vendor no longer provides updates. An attacker exploits a known vulnerability in the OS to gain access to the server and steal data. Which on-premises attack vector is being exploited?
Select an answer first
25foundation · easy
How does a trojan typically infect a system?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.