350-701 Security Concepts Practice Test 2 — 15 Questions

Question 1

A security analyst is reviewing logs and sees multiple failed login attempts from a single IP address, followed by a successful login. Which type of attack does this represent?

Accepted Answer

Brute-force attack. A brute-force attack involves repeated attempts to guess credentials, often automated, until successful.

Answer

SQL injection

Answer

Man-in-the-middle attack

Answer

Phishing

Question 2

An organization wants to implement a security model where no user or device is trusted by default, regardless of whether they are inside or outside the network perimeter. Which concept does this describe?

Accepted Answer

Zero Trust. Zero Trust assumes no implicit trust and verifies every access request.

Answer

Defense in depth

Answer

Least privilege

Answer

Network segmentation

Question 3

A security engineer is configuring a Cisco Firepower NGFW to detect and block a new malware variant that communicates with a command-and-control server using encrypted DNS queries. Which Cisco security product is best suited to provide visibility into this malicious DNS traffic?

Accepted Answer

Cisco Umbrella. Cisco Umbrella is a cloud-delivered DNS security service that can block malicious domains and provide visibility into DNS queries.

Answer

Cisco ASA

Answer

Cisco AMP

Answer

Cisco Stealthwatch

Question 4

Which of the following is an example of a passive reconnaissance technique?

Accepted Answer

OSINT gathering from public websites. Passive reconnaissance involves gathering information without directly interacting with the target, such as through public sources.

Answer

Port scanning

Answer

Social engineering

Answer

Vulnerability scanning

Question 5

A company deploys a solution that uses a root certificate authority (CA) and intermediate CAs to issue certificates. What is the term for the hierarchical structure of certificates from the root CA to the end entity?

Accepted Answer

Certificate chaining. Certificate chaining refers to the path from the root CA through intermediates to the end-entity certificate.

Answer

Certificate signing request

Answer

Certificate revocation list

Answer

Public key infrastructure

Question 6

Which Cisco security product provides identity-based access control and policy enforcement for wired and wireless networks?

Accepted Answer

Cisco ISE. Cisco Identity Services Engine (ISE) is a policy platform for secure access control.

Answer

Cisco Stealthwatch

Answer

Cisco Firepower

Answer

Cisco ASA

Question 7

An attacker intercepts traffic between a client and a server and modifies the communication without either party knowing. Which type of attack is being performed?

Accepted Answer

Man-in-the-middle attack. A man-in-the-middle (MITM) attack involves interception and potential modification of communications.

Answer

Phishing

Answer

Replay attack

Answer

Denial of service

Question 8

Which encryption algorithm is classified as symmetric?

Accepted Answer

AES. AES is a symmetric encryption algorithm, using the same key for encryption and decryption.

Answer

RSA

Answer

Diffie-Hellman

Answer

ECDSA

Question 9

A security team implements a policy where users must provide a password and a one-time code from a mobile app. Which authentication factors are being used?

Accepted Answer

Knowledge and possession. Something you know (password) and something you have (mobile app one-time code).

Answer

Inherence only

Answer

Possession and inherence

Answer

Knowledge and inherence

Question 10

A Cisco ESA administrator notices that a large number of emails with malicious attachments are being delivered to users. Which feature should be configured to inspect attachments in a sandbox environment before delivery?

Accepted Answer

Cisco ESA with AMP. Cisco ESA can integrate with AMP (Advanced Malware Protection) to sandbox and analyze attachments.

Answer

Cisco AMP for Endpoints

Answer

Cisco Stealthwatch

Answer

Cisco Firepower

Question 11

What is the primary purpose of a digital signature?

Accepted Answer

Verify the sender's identity and ensure message integrity. A digital signature provides authentication, integrity, and non-repudiation.

Answer

Compress the data

Answer

Prevent replay attacks

Answer

Encrypt the message

Question 12

Which type of malware is characterized by encrypting files on a victim's system and demanding payment for the decryption key?

Accepted Answer

Ransomware. Ransomware encrypts data and demands ransom.

Answer

RAT

Answer

Keylogger

Answer

Botnet

Question 13

A security analyst is investigating a potential ARP spoofing attack. Which two symptoms would indicate this type of attack?

Accepted Answer

Duplicate IP addresses in the ARP table. ARP spoofing involves sending fake ARP messages to associate the attacker's MAC with the IP of another host, causing traffic to be misdirected.

Answer

High CPU usage on the switch

Answer

Increased broadcast traffic

Answer

Unusual outbound DNS queries

Question 14

Which three components are part of the CIA triad?

Accepted Answer

Integrity. The CIA triad consists of Confidentiality, Integrity, and Availability.

Answer

Authentication

Answer

Authorization

Question 15

A company is planning to deploy a Zero Trust architecture. Which two principles are fundamental to Zero Trust?

Accepted Answer

Never trust, always verify. Zero Trust is based on 'never trust, always verify' and least privilege access.

Answer

Single-factor authentication

Answer

Perimeter-based security

Answer

Implicit trust for internal networks