350-701 Security Concepts Practice Test 3 — 15 Questions

Question 1

Which component of the CIA triad ensures that data is not altered by unauthorized entities during transmission?

Accepted Answer

Integrity. Integrity ensures that data remains accurate and unaltered during storage or transmission, preventing unauthorized modifications.

Answer

Non-repudiation

Answer

Availability

Answer

Confidentiality

Question 2

An attacker uses a tool to scan a target network for open ports and running services. Which type of reconnaissance does this represent?

Accepted Answer

Active scanning. Active reconnaissance involves direct interaction with the target, such as port scanning, to gather information.

Answer

DNS cache poisoning

Answer

Social engineering

Answer

Passive OSINT

Question 3

A security administrator is evaluating symmetric encryption algorithms for a new VPN deployment. Which algorithm uses a 128-bit block size and supports key sizes of 128, 192, and 256 bits?

Accepted Answer

AES. AES is a symmetric block cipher with a fixed block size of 128 bits and key sizes of 128, 192, or 256 bits.

Answer

3DES

Answer

RSA

Answer

MD5

Question 4

Which of the following is a characteristic of a zero trust security model?

Accepted Answer

Never trust, always verify. Zero trust assumes no implicit trust; every request must be verified regardless of source.

Answer

Implicit trust for internal users

Answer

Trust but verify

Answer

Trust based on network location

Question 5

An employee receives an email that appears to be from the company's IT department requesting their login credentials. This is an example of which type of attack?

Accepted Answer

Phishing. Social engineering attacks manipulate individuals into divulging confidential information. Phishing is a common form.

Answer

Spear phishing

Answer

Vishing

Answer

Whaling

Question 6

A security engineer is configuring a Cisco Firepower NGFW to detect a buffer overflow attack. Which attack vector is this?

Accepted Answer

Exploitation. Buffer overflow is an exploitation technique where an attacker writes beyond the allocated buffer to execute arbitrary code.

Answer

Malware delivery

Answer

Reconnaissance

Answer

Denial of Service

Question 7

What is the primary function of a Certificate Revocation List (CRL) in a PKI?

Accepted Answer

List revoked certificates. CRL lists certificates that have been revoked before their expiration date, allowing relying parties to verify validity.

Answer

Store private keys

Answer

Validate certificate signatures

Answer

Generate new certificates

Question 8

Which Cisco security product provides DNS-layer security to block malicious domains and cloud-based threats?

Accepted Answer

Cisco Umbrella. Cisco Umbrella is a cloud-delivered security service that provides DNS-layer filtering to block malicious destinations.

Answer

Cisco Stealthwatch

Answer

Cisco ISE

Answer

Cisco AMP

Question 9

An organization implements multi-factor authentication requiring a password and a fingerprint scan. Which two authentication factors are being used?

Accepted Answer

Knowledge and inherence. Password is a knowledge factor, fingerprint is an inherence (biometric) factor.

Answer

Knowledge and possession

Answer

Inherence and location

Answer

Possession and inherence

Question 10

An attacker intercepts traffic between a client and server using ARP spoofing. Which type of attack is this?

Accepted Answer

Man-in-the-middle. ARP spoofing allows an attacker to intercept traffic, enabling man-in-the-middle (MITM) attacks.

Answer

Session hijacking

Answer

DNS poisoning

Answer

Denial of Service

Question 11

Which Cisco security product is primarily used for endpoint threat detection and retrospective security?

Accepted Answer

Cisco AMP for Endpoints. Cisco AMP (Advanced Malware Protection) provides endpoint protection with retrospective analysis and threat detection.

Answer

Cisco ESA

Answer

Cisco Firepower

Answer

Cisco WSA

Question 12

What is the primary purpose of a digital signature?

Accepted Answer

Verify the sender's identity and data integrity. Digital signatures provide authentication, integrity, and non-repudiation by signing data with a private key.

Answer

Encrypt data

Answer

Generate random numbers

Answer

Compress data

Question 13

An organization is implementing a zero trust architecture. Which two principles are foundational to this model? (Choose two.)

Accepted Answer

Never trust, always verify. Zero trust is built on 'never trust, always verify' and 'least privilege' to minimize access.

Answer

Single factor authentication

Answer

Implicit trust for internal networks

Answer

Trust but verify

Question 14

A security analyst detects a DDoS attack targeting the company's web server. Which three attack types are classified as application layer attacks? (Choose three.)

Accepted Answer

DNS query flood. Application layer DDoS attacks target specific applications, such as HTTP floods, Slowloris, and DNS query floods.

Answer

DNS amplification

Answer

SYN flood

Question 15

Which three cryptographic algorithms are considered secure for use in modern systems? (Choose three.)

Accepted Answer

ECDSA. AES (symmetric), RSA (asymmetric), and ECDSA (asymmetric) are widely accepted secure algorithms.

Answer

MD5

Answer

3DES