{"id":14610,"date":"2026-09-17T06:08:25","date_gmt":"2026-09-17T06:08:25","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=14610"},"modified":"2026-09-17T06:08:25","modified_gmt":"2026-09-17T06:08:25","slug":"cisco-ccnp-cybersecurity-350-201-practice-test-questions-and-exam-dumps-part8-q141-160","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/cisco-ccnp-cybersecurity-350-201-practice-test-questions-and-exam-dumps-part8-q141-160\/","title":{"rendered":"Cisco CCNP Cybersecurity 350-201 Practice Test Questions and Exam Dumps Part8 Q141-160"},"content":{"rendered":"<h1><\/h1>\n<h2><b>View Full <\/b><a href=\"https:\/\/www.examlabs.com\/350-201-exam-dumps\"><b>Cisco CCNP Cybersecurity 350-201 Exam Dumps<\/b><\/a><b> and Practice Test Dumps.<\/b><\/h2>\n<p>&nbsp;<\/p>\n<h3><b>Question 141<\/b><\/h3>\n<p><b>What security technology uses machine learning to detect behavioral anomalies in enterprise event logs?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Layer 2 unmanaged Ethernet switch<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Security Information and Event Management (SIEM)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Basic passive network signal repeater<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Unshielded twisted-pair patch cable<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">A Security Information and Event Management (SIEM) solution is a comprehensive enterprise security technology that aggregates, normalizes, and correlates log data collected from various hardware devices, operating systems, applications, and network infrastructure components. By centralizing log telemetry, SIEM platforms enable security operations centers to monitor real-time security events, detect advanced persistent threats, and identify behavioral anomalies that deviate from established baselines. They utilize pre-configured correlation rules, automated threat intelligence feeds, and machine learning algorithms to generate actionable alerts, facilitating rapid incident response and regulatory compliance auditing.<\/span><\/p>\n<h3><b>Question 142<\/b><\/h3>\n<p><b>Which cryptographic mode provides both data confidentiality and authentication simultaneously within symmetric block ciphers?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Electronic Codebook mode encryption<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cipher Block Chaining mode standard<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Galois\/Counter Mode authenticated encryption<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Counter Mode cipher implementation<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Galois\/Counter Mode (GCM) is an authenticated encryption mode of operation designed to provide both data confidentiality and data integrity simultaneously within symmetric block ciphers like AES. Traditional encryption modes required separate mechanisms to verify integrity, leaving systems vulnerable to tampering if message authentication codes were omitted or misconfigured. GCM combines counter mode encryption with universal hashing over a Galois field, ensuring that any unauthorized modification to ciphertext or associated authentication data is detected instantly. Because of its high performance and robust security guarantees, GCM is heavily utilized in modern TLS 1.3 protocols and secure enterprise VPN deployments.<\/span><\/p>\n<h3><b>Question 143<\/b><\/h3>\n<p><b>What networking mechanism prevents IP spoofing by checking if packets arrive on the optimal interface back to the source IP?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Dynamic Host Configuration Protocol snooping<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Address Resolution Protocol dynamic inspection<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Unicast Reverse Path Forwarding (uRPF)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Port security MAC address limiting<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Unicast Reverse Path Forwarding (uRPF) is a security and routing feature implemented on Cisco network devices to mitigate problems caused by malicious or accidental IP address spoofing. When uRPF is enabled on an interface, the router examines incoming packets and checks its routing table to determine if the packet arrived on the optimal interface back to the source IP address. If the packet arrives on an unexpected interface or if no valid routing entry exists for that source IP, the router drops the packet. This prevents attackers from launching spoofed DoS attacks or bypassing perimeter access controls.<\/span><\/p>\n<h3><b>Question 144<\/b><\/h3>\n<p><b>Which security assessment technique involves an ethical hacker simulating real-world cyber attacks against an organization?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Static application source code review<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Penetration testing assessment engagement<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Passive network traffic log sniffing<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Automated vulnerability port scanning<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Penetration testing is an authorized, simulated cyber attack launched against a computer system, network, or web application to evaluate security posture and identify exploitable vulnerabilities. Performed by ethical hackers, penetration testing mimics the tactics, techniques, and procedures utilized by real-world threat actors to bypass defenses. The assessment uncovers weak configurations, unpatched software flaws, and architectural security gaps before malicious attackers can exploit them. Comprehensive reporting from penetration tests allows security teams to prioritize remediation efforts and strengthen overall organizational defense mechanisms.<\/span><\/p>\n<h3><b>Question 145<\/b><\/h3>\n<p><b>What enterprise network design divides infrastructure into micro-zones to limit lateral movement after a security breach?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Flat unsegmented network topology<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Micro-segmentation firewall policy<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Passive signal repeating hub architecture<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Unencrypted remote administration Telnet<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Enterprise network micro-segmentation is an advanced security architecture that divides a data center or cloud environment into distinct, highly secure zones down to the workload or container level. By enforcing granular, perimeter-less firewall policies between individual servers and application tiers, micro-segmentation restricts lateral movement for attackers who manage to breach the initial network perimeter. Even if a single endpoint or server is compromised, the containment policies prevent malware from spreading laterally across adjacent internal systems, significantly reducing the overall blast radius of security incidents within enterprise networks.<\/span><\/p>\n<h3><b>Question 146<\/b><\/h3>\n<p><b>Which automated tool injects malformed inputs into programs to discover memory exceptions and crashes?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Static code review analysis tool<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Passive network traffic logging agent<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Application fuzz testing (Fuzzing)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Active network port scanning utility<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Fuzz testing\u2014or fuzzing\u2014is an automated software testing technique that involves injecting massive amounts of invalid, malformed, or random data inputs into a computer program to monitor for software exceptions, memory leaks, assertion failures, and application crashes. Software developers and security engineers utilize fuzz testing during the development lifecycle to uncover unhandled edge cases, buffer overflow vulnerabilities, and input validation flaws that traditional unit tests might overlook. By identifying and patching these hidden software bugs prior to production release, organizations significantly enhance application robustness and reduce vulnerability risks.<\/span><\/p>\n<h3><b>Question 147<\/b><\/h3>\n<p><b>What endpoint security technology provides behavioral telemetry recording and automated process containment?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Basic static antivirus software<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Passive network packet sniffer<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Unshielded twisted-pair patch cable<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Endpoint Detection and Response (EDR)<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 4<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Endpoint Detection and Response (EDR) is a cybersecurity technology that continuously monitors end-user devices and hosts to collect telemetry, detect suspicious behaviors, and provide automated containment and remediation capabilities. Unlike traditional antivirus software that relied primarily on static file signatures to block known malware, EDR tools record process executions, file modifications, registry changes, and network connections in real time. This behavioral visibility enables security analysts to identify zero-day exploits, fileless malware attacks, and advanced persistent threats executing on enterprise endpoints.<\/span><\/p>\n<h3><b>Question 148<\/b><\/h3>\n<p><b>Which threat intelligence schema standardizes the sharing of cyber threat information in JSON or XML format?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Structured Threat Information Expression (STIX)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Common Vulnerability Scoring System (CVSS)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Open Web Application Security Project (OWASP)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">National Institute of Standards (NIST) framework<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Structured Threat Information Expression (STIX) is a standardized, structured XML\/JSON language and serialization format developed to describe cyber threat information so it can be shared, stored, and analyzed in a consistent manner. STIX covers a comprehensive range of threat data, including threat actor profiles, campaign details, malware signatures, indicators of compromise, and recommended mitigation actions. When paired with trusted automated exchange protocols like TAXII, STIX enables security operations centers and automated defenses to share real-time threat intelligence seamlessly across disparate organizational boundaries.<\/span><\/p>\n<h3><b>Question 149<\/b><\/h3>\n<p><b>What cryptographic mechanism generates unique session keys for every communication session to ensure past ciphertexts remain secure if long-term keys are compromised?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Static RSA public key encryption<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Forward secrecy (Perfect Forward Secrecy)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Plaintext symmetric session key sharing<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Electronic Codebook mode cipher encryption<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Forward secrecy\u2014often referred to as Perfect Forward Secrecy (PFS)\u2014is a security feature of specific key agreement protocols that ensures session keys derived from public key cryptography are not compromised even if the private key of the server is compromised at a later date. PFS achieves this by generating a unique, temporary session key for every individual communication session using ephemeral Diffie-Hellman key exchanges. Because the long-term private key is never used directly to encrypt the session data, past recorded ciphertexts remain completely secure against retrospective decryption.<\/span><\/p>\n<h3><b>Question 150<\/b><\/h3>\n<p><b>Which cloud deployment model provides computing resources exclusively managed and hosted for a single organization?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Public cloud shared multi-tenant environment<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Hybrid cloud federated infrastructure<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Community cloud collaborative platform<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Private cloud dedicated hardware environment<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 4<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">A private cloud deployment model provides cloud computing resources dedicated exclusively to a single business organization, hosted either on-premises or managed externally by a third-party vendor. Unlike public cloud environments that pool virtualized infrastructure across multiple tenants, a private cloud maintains dedicated physical hardware, storage arrays, and network fabrics. This architecture delivers superior control, customization, and data privacy, making it an ideal choice for enterprises operating under strict regulatory compliance mandates, financial constraints, or specialized security requirements that prohibit sharing physical infrastructure with external tenants.<\/span><\/p>\n<h3><b>Question 151<\/b><\/h3>\n<p><b>What security protocol synchronizes network clocks securely using cryptographic keys and TLS protection?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Simple Network Management Protocol v1<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Dynamic Host Configuration Protocol<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Network Time Security (NTS) protocol<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Trivial File Transfer Protocol utility<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Network Time Security (NTS) is a cryptographic extension of the Network Time Protocol designed to provide secure, authenticated time synchronization across computer networks. Traditional time synchronization protocols were highly vulnerable to spoofing, tampering, and man-in-the-middle attacks, allowing malicious actors to manipulate system clocks and disrupt time-sensitive security logs, Kerberos authentication tickets, and cryptographic certificates. NTS addresses this by utilizing Transport Layer Security and authenticated encryption to secure time packets between clients and time servers, ensuring absolute time integrity across enterprise infrastructure and distributed systems.<\/span><\/p>\n<h3><b>Question 152<\/b><\/h3>\n<p><b>Which targeted phishing attack focuses specifically on high-profile corporate executives and decision-makers?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Low-volume automated credential stuffing<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">General broadcast spam email campaign<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Whaling executive phishing attack<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Standard network port scanning script<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Whaling is a specialized form of spear phishing that specifically targets high-profile senior executives, chief executive officers, or individuals with privileged administrative access within an organization. Because these targets possess access to highly sensitive corporate data and financial authorization controls, attackers craft highly sophisticated, personalized social engineering messages\u2014often masquerading as legal subpoenas, executive directives, or urgent board communications\u2014to trick victims into transferring funds or divulging critical credentials. Defending against whaling requires executive security awareness training and strict dual-authorization workflows.<\/span><\/p>\n<h3><b>Question 153<\/b><\/h3>\n<p><b>What specialized network appliance decrypts and inspects HTTPS traffic inline to detect hidden malware payloads?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Layer 2 unmanaged Ethernet switch<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Basic passive network signal repeater hub<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Unshielded twisted-pair patch cable<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">SSL\/TLS decryption proxy appliance<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 4<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">An SSL\/TLS decryption proxy is a specialized network security appliance placed inline to intercept, decrypt, inspect, and re-encrypt HTTPS web traffic passing between internal clients and external web servers. Because modern cyber threats frequently utilize encryption to evade traditional perimeter defenses, security teams deploy SSL decryption to allow next-generation firewalls and intrusion prevention systems to analyze underlying application payloads, detect embedded malware, and enforce organizational data loss prevention policies without breaking end-to-end cryptographic integrity.<\/span><\/p>\n<h3><b>Question 154<\/b><\/h3>\n<p><b>Which discipline encompasses the collection, preservation, and analysis of digital evidence for legal investigations?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Network traffic packet sniffing<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Computer digital forensics investigation<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Static application source code review<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Vulnerability assessment scanning<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Computer digital forensics is a specialized branch of forensic science encompassing the recovery, investigation, examination, and analysis of material found in digital devices, often in relation to computer crime and security breaches. Digital forensics professionals follow strict chain-of-custody protocols to ensure that digital evidence\u2014such as hard disk images, memory dumps, and log files\u2014is collected, preserved, and analyzed without altering or contaminating the original data. This rigorous methodology ensures that findings remain legally admissible in court and provides actionable intelligence regarding root causes during enterprise incident response investigations.<\/span><\/p>\n<h3><b>Question 155<\/b><\/h3>\n<p><b>What security control calculates and compares cryptographic file hashes to detect unauthorized system file tampering?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Passive network traffic log analyzer<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">File integrity monitoring (FIM) software<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Dynamic IP address leasing daemon<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Unshielded twisted-pair cabling link<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">File integrity monitoring (FIM) is an automated security control and software mechanism that examines operating system files, application binaries, and configuration files to detect unauthorized modifications, tampering, or corruption. FIM tools typically calculate cryptographic hash baselines of critical system files during known-good states and continuously compare current file hashes against these baseline references. If an attacker modifies a system binary, installs a rootkit, or alters configuration settings, the FIM engine instantly flags the discrepancy, generating real-time security alerts for incident response teams to investigate potential system compromises.<\/span><\/p>\n<h3><b>Question 156<\/b><\/h3>\n<p><b>Which framework defines organizational security guidelines structured around Identify, Protect, Detect, Respond, and Recover?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">National Institute of Standards and Technology framework<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Layer 2 Ethernet switching standard specification<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Dynamic Host Configuration Protocol server protocol<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Structured cabling patch panel wiring guide<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The National Institute of Standards and Technology (NIST) Cybersecurity Framework provides a comprehensive, policy-based standard of guidelines, standards, and best practices designed to help organizations manage and reduce cybersecurity risk. Structured around five core functions\u2014Identify, Protect, Detect, Respond, and Recover\u2014the framework enables organizations of all sizes to assess their current security posture, establish target maturity levels, and communicate security requirements across business units. By adopting NIST guidelines, enterprises can build resilient security programs, align technical defenses with business objectives, and streamline regulatory compliance audits effectively.<\/span><\/p>\n<h3><b>Question 157<\/b><\/h3>\n<p><b>What centralized identity service provides Single Sign-On and federation across multiple enterprise cloud applications?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Active Directory federation and SSO<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Passive packet analyzer diagnostic tool<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Unshielded twisted-pair patch cable link<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Layer 2 unmanaged Ethernet switch device<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Active Directory federation and Single Sign-On (SSO) services provide centralized identity management and authentication validation across multiple disparate security domains, cloud platforms, and enterprise applications. Instead of requiring users to maintain separate credentials for every service, federation utilizes standardized protocols like Security Assertion Markup Language and OpenID Connect to securely pass authenticated identity tokens between trusted identity providers and service providers. This centralized approach simplifies administrative overhead, enhances user experience, and strengthens enterprise security by reducing password fatigue and centralizing multi-factor authentication enforcement.<\/span><\/p>\n<h3><b>Question 158<\/b><\/h3>\n<p><b>Which protocol provides centralized AAA services using UDP and encrypts only the password field within access-request packets?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">TACACS+ protocol secure daemon<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Secure Shell remote console service<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Remote Authentication Dial-In User Service (RADIUS)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Lightweight Directory Access Protocol Secure<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Remote Authentication Dial-In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for users who connect and use a network service. Operating primarily over UDP ports 1812 and 1813, traditional RADIUS encrypts only the user&#8217;s password within the access-request packet, while leaving the rest of the packet payload unencrypted. RADIUS combines authentication and authorization into a single process, making it widely deployed for network access control, VPN connections, and wireless 802.1X enterprise environments.<\/span><\/p>\n<h3><b>Question 159<\/b><\/h3>\n<p><b>What cryptographic exploit attempts to find two distinct inputs that generate identical hash digests under a hash function?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Brute-force password decryption<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Dictionary key recovery attack<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Man-in-the-middle interception<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Hash collision attack<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 4<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">A hash collision attack is a cryptographic exploit where an attacker attempts to find two distinct plaintext inputs that produce identical cryptographic hash values under a specific hash function (such as MD5 or SHA-1). Because cryptographic hash functions map arbitrarily large data sets to fixed-size outputs, collisions are mathematically possible, but a secure hash function makes finding them computationally infeasible. When a hashing algorithm suffers from collision vulnerabilities, it undermines digital signatures and certificate integrity, forcing organizations to transition to stronger algorithms like SHA-256 or SHA-3.<\/span><\/p>\n<h3><b>Question 160<\/b><\/h3>\n<p><b>Which routing security framework uses cryptographic Route Origin Authorizations to prevent BGP prefix hijacking?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Resource Public Key Infrastructure (RPKI)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Simple Network Management Protocol v3<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Dynamic ARP Inspection mechanism<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Port-based 802.1X network access control<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Resource Public Key Infrastructure (RPKI) is a specialized cryptographic framework designed to secure the routing infrastructure of the internet by validating the ownership of Internet Number Resources. BGP routing table exchanges historically lacked built-in authentication, leaving global routing vulnerable to malicious prefix hijacking. RPKI utilizes cryptographic Route Origin Authorizations to bind specific IP address prefixes to authorized autonomous system numbers. Routers implementing RPKI validate these digital signatures before accepting routing updates, ensuring reliable path selection and global routing security.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>View Full Cisco CCNP Cybersecurity 350-201 Exam Dumps and Practice Test Dumps. &nbsp; Question 141 What security technology uses machine learning to detect behavioral anomalies in enterprise event logs? Layer 2 unmanaged Ethernet switch Security Information and Event Management (SIEM) Basic passive network signal repeater Unshielded twisted-pair patch cable Correct Answer: 2 Explanation: A Security [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/14610"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=14610"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/14610\/revisions"}],"predecessor-version":[{"id":14680,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/14610\/revisions\/14680"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=14610"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=14610"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=14610"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}