Free Cisco 350-201 Exam Questions

Become Cisco Certified with updated 350-201 exam questions and correct answers

Page: 1 / 28

Total 140 Questions | Updated On: May 12, 2026

Add To Cart

Question 1

An engineer wants to review the packet overviews of SNORT alerts. When printing the SNORT alerts, all the packet headers are included, and the file is too large to utilize. Which action is needed to correct this problem?

A : dify the alert rule to ''output alert_syslog: output log''

B : dify the output module rule to ''output alert_quick: output filename''

C : dify the alert rule to ''output alert_syslog: output header''

D : dify the output module rule to ''output alert_fast: output filename''

Answer: A

Question 2

A company's web server availability was breached by a DDoS attack and was offline for 3 hours because it was not deemed a critical asset in the incident response playbook. Leadership has requested a risk assessment of the asset. An analyst conducted the risk assessment using the threat sources, events, and vulnerabilities. Which additional element is needed to calculate the risk?

A : essment scope

B : ent severity and likelihood

C : cident response playbook

D : k model framework

Answer: D

Question 3

Refer to the exhibit.

What is occurring in this packet capture?

A : P port scan

B : P flood

C : flood

D : tunneling

Answer: B

Question 4

Refer to the exhibit.

Two types of clients are accessing the front ends and the core database that manages transactions, access control, and atomicity. What is the threat model for the SQL database?

A : attacker can initiate a DoS attack.

B : attacker can read or change data.

C : attacker can transfer data to an external server.

D : attacker can modify the access logs.

Answer: A

Question 5

Refer to the exhibit.

Where are the browser page rendering permissions displayed?

A : frame-options

B : xss-protection

C : content-type-options

D : test-debug

Answer: C

Page: 1 / 28

Total 140 Questions | Updated On: May 12, 2026

Add To Cart