{"id":14621,"date":"2026-09-17T06:05:46","date_gmt":"2026-09-17T06:05:46","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=14621"},"modified":"2026-09-17T06:05:46","modified_gmt":"2026-09-17T06:05:46","slug":"cisco-ccnp-cybersecurity-350-201-practice-test-questions-and-exam-dumps-part19-q361-380","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/cisco-ccnp-cybersecurity-350-201-practice-test-questions-and-exam-dumps-part19-q361-380\/","title":{"rendered":"Cisco CCNP Cybersecurity 350-201 Practice Test Questions and Exam Dumps Part19 Q361-380"},"content":{"rendered":"<h1><\/h1>\n<h2><b>View Full <\/b><a href=\"https:\/\/www.examlabs.com\/350-201-exam-dumps\"><b>Cisco CCNP Cybersecurity 350-201 Exam Dumps<\/b><\/a><b> and Practice Test Dumps.<\/b><\/h2>\n<p>&nbsp;<\/p>\n<h3><b>Question 361<\/b><\/h3>\n<p><b>Which protocol enables secure remote administrative command-line access sessions?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Unencrypted Telnet remote management session protocol<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Secure Shell (SSH) cryptographic network management protocol<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Trivial File Transfer Protocol file utility daemon<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Simple Network Management Protocol version 1 service<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Secure Shell (SSH) is a cryptographic network protocol that enables secure administrative sessions, remote command execution, and file transfers over an unsecured network. Operating by default on TCP port 22, SSH replaces legacy plaintext protocols like Telnet by wrapping all communications\u2014including login credentials and command outputs\u2014in robust cryptographic encryption. This prevents eavesdropping, credential harvesting, and session hijacking by malicious threat actors positioned on the network path. Administrators rely heavily on SSH for secure switch and router management across enterprise infrastructure, ensuring operational integrity and strict compliance with organizational security hardening standards.<\/span><\/p>\n<h3><b>Question 362<\/b><\/h3>\n<p><b>What network service automates IP address assignment dynamically?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Dynamic Host Configuration Protocol (DHCP) service<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Domain Name System resolution server daemon<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Network Time Protocol synchronization utility service<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Unmanaged Layer 2 Ethernet bridge switch<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The Dynamic Host Configuration Protocol (DHCP) is a network management protocol used to automate the process of configuring devices on IP networks, allowing them to use network services such as DNS, NTP, and any other communication protocol based on UDP. DHCP eliminates the need for network administrators to manually assign static IP addresses to every client endpoint, printer, or server entering the enterprise environment. By managing a centralized pool of IP addresses and leasing them out for defined time intervals, DHCP ensures efficient address utilization, prevents configuration conflicts, and integrates smoothly with security features like DHCP snooping and IP Source Guard.<\/span><\/p>\n<h3><b>Question 363<\/b><\/h3>\n<p><b>Which cryptographic algorithm provides asymmetric public-key encryption services?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Advanced Encryption Standard symmetric block cipher<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Rivest-Shamir-Adleman (RSA) asymmetric cryptographic algorithm<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Message Digest 5 cryptographic hashing function<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Secure Hash Algorithm 256-bit message digest<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The Rivest-Shamir-Adleman (RSA) cryptosystem is one of the earliest and most widely utilized public-key cryptographic algorithms. It relies on the mathematical difficulty of factoring the product of two large prime numbers. RSA is foundational to modern cybersecurity, providing robust mechanisms for secure data encryption, digital signatures, and key exchange protocols such as establishing TLS sessions. While newer elliptic-curve cryptography offers equivalent security with smaller key sizes, RSA remains a foundational cornerstone of enterprise Public Key Infrastructure deployments and digital certificate authentication mechanisms worldwide.<\/span><\/p>\n<h3><b>Question 364<\/b><\/h3>\n<p><b>What security feature protects switch ports against flooding?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Port security MAC address limiting filter<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Dynamic Host Configuration Protocol snooping daemon<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Unicast Reverse Path Forwarding route check<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Address Resolution Protocol dynamic inspection filter<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Port security is a foundational Layer 2 hardening feature implemented on enterprise network switches to restrict input to an interface by limiting and identifying the maximum number of source MAC addresses allowed on a specific port. By restricting access to authorized physical endpoints, port security prevents CAM table exhaustion attacks\u2014where malicious actors flood switches with thousands of randomized MAC addresses to force hub-like broadcast behavior. When an unauthorized device attempts to connect or when the configured MAC limit is exceeded, port security can trigger automated defensive mitigations such as shutting down the port or dropping offending frames, safeguarding enterprise network integrity against unauthorized physical access.<\/span><\/p>\n<h3><b>Question 365<\/b><\/h3>\n<p><b>Which cloud security model enforces multi-cloud configuration compliance?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cloud Access Security Broker proxy inspection tool<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cloud Security Posture Management (CSPM) solution<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Firewall Management Center policy administration appliance<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Dynamic Host Configuration server lease daemon<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Cloud Security Posture Management (CSPM) tools are specialized security solutions designed to automate the continuous monitoring of multi-cloud environments\u2014such as Amazon Web Services, Microsoft Azure, and Google Cloud Platform\u2014to detect configuration flaws, security risks, compliance violations, and identity management gaps. CSPM platforms provide automated remediation guidance and deep visibility into complex cloud asset inventories, helping security teams maintain a strong, compliant security posture across distributed cloud infrastructure without manual audits or operational delays. By evaluating environments against regulatory standards like CIS benchmarks and NIST frameworks, CSPM tools ensure that cloud misconfigurations are identified and remediated before adversaries can exploit them.<\/span><\/p>\n<h3><b>Question 366<\/b><\/h3>\n<p><b>What IEEE standard defines port-based network access control?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">IEEE 802.1Q VLAN trunking specification<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">IEEE 802.1X port-based access control standard<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">IEEE 802.11ac wireless local area network<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">IEEE 802.1w Rapid Spanning Tree protocol<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The IEEE 802.1X standard defines port-based network access control, providing an authentication mechanism for devices wishing to attach to a wired LAN or wireless WLAN. 802.1X uses the Extensible Authentication Protocol to pass authentication messages between the supplicant client, the network access device acting as an authenticator, and a centralized authentication server such as RADIUS or Cisco ISE. Until the client successfully authenticates, the switch port blocks all non-EAP traffic, preventing unauthorized or rogue endpoints from accessing enterprise network resources. This enforces strict device compliance before granting access to internal corporate network segments.<\/span><\/p>\n<h3><b>Question 367<\/b><\/h3>\n<p><b>Which Cisco ISE node handles central policy configuration?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Policy Administration Node (PAN) within Cisco ISE<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Policy Service Node processing network access requests<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Monitoring and Analytics Node data repository<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Unmanaged Layer 2 Ethernet switch device<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Within a distributed Cisco Identity Services Engine deployment, the Policy Administration Node (PAN) serves as the central administrative interface responsible for system configuration, policy creation, profiling management, and administrative reporting. Deploying ISE in a distributed architecture separates administration, policy service, and monitoring functions across dedicated nodes to ensure high availability, scalability, and robust performance across large enterprise environments. The PAN pushes compiled policies down to Policy Service Nodes, allowing network access control rules to be enforced uniformly and efficiently across multi-site campus and branch deployments.<\/span><\/p>\n<h3><b>Question 368<\/b><\/h3>\n<p><b>What protocol provides secure directory service queries?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Unencrypted Lightweight Directory Access Protocol (LDAP)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Lightweight Directory Access Protocol Secure (LDAPS)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Trivial File Transfer Protocol directory utility<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Simple Network Management Protocol daemon service<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Lightweight Directory Access Protocol Secure (LDAPS) is the secure implementation of LDAP that encrypts all communications between client applications and directory service servers using Transport Layer Security or Secure Sockets Layer. Standard LDAP transmits directory queries, user attributes, and passwords in clear text over TCP port 389, leaving them vulnerable to packet sniffing and credential harvesting. LDAPS operates by default over TCP port 636, wrapping directory transactions in cryptographic privacy to protect enterprise authentication data and user directory attributes from internal and external adversaries.<\/span><\/p>\n<h3><b>Question 369<\/b><\/h3>\n<p><b>Which metric group captures intrinsic vulnerability severity characteristics?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Temporal vulnerability metrics measurement group<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Environmental vulnerability metrics evaluation group<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Base vulnerability metrics characterization group<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Exploitability operational index metrics collection<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The Common Vulnerability Scoring System is divided into three core metric groups: Base, Temporal, and Environmental. The Base metrics group captures the intrinsic characteristics of a vulnerability that remain constant over time and are invariant across user environments, such as Attack Vector, Privileges Required, and Confidentiality Impact. Temporal metrics measure characteristics that evolve over time, such as exploit code maturity and remediation availability, while Environmental metrics customize scores to specific organizational deployments. Understanding the Base metric group allows security teams to evaluate the fundamental severity of a software flaw objectively regardless of where it is deployed across enterprise networks.<\/span><\/p>\n<h3><b>Question 370<\/b><\/h3>\n<p><b>What network hardening practice rate-limits control plane traffic?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Flat unsegmented network bridging topology<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Unencrypted Telnet console remote management<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Control Plane Policing (CoPP) security feature<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Passive optical network signal tapping hub<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Control Plane Policing (CoPP) is a security and Quality of Service feature implemented on Cisco network hardware that utilizes QoS mechanisms to manage and rate-limit control plane traffic destined for the device&#8217;s CPU. By prioritizing legitimate routing protocols\u2014like BGP and OSPF\u2014and throttling excessive or malicious traffic streams\u2014such as ARP floods or Denial of Service attacks\u2014CoPP prevents CPU resource exhaustion and ensures network device stability. Protecting the control plane prevents malicious actors from crashing core routers and switches, maintaining continuous network availability across enterprise architecture.<\/span><\/p>\n<h3><b>Question 371<\/b><\/h3>\n<p><b>Which mechanism prevents rogue DHCP servers on switches?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Port security MAC address limiting filter<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">DHCP snooping Layer 2 security technology<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Dynamic ARP Inspection port verification check<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Unicast Reverse Path Forwarding routing check<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">DHCP snooping is a Layer 2 security technology built into enterprise switches that acts as a firewall between untrusted host devices and trusted DHCP servers. When enabled, DHCP snooping intercepts DHCP traffic, drops malicious DHCP server replies originating from untrusted ports (mitigating rogue DHCP server attacks), and builds a dynamic binding database tracking client IP addresses, MAC addresses, switch ports, and VLANs. This database is subsequently utilized by features like Dynamic ARP Inspection and IP Source Guard to ensure comprehensive Layer 2 network integrity and prevent rogue server attacks across campus environments.<\/span><\/p>\n<h3><b>Question 372<\/b><\/h3>\n<p><b>What protocol exchanges cyber threat intelligence data securely?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Trusted Automated Exchange of Intelligence Information (TAXII)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Simple Network Management Protocol version 3 daemon<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Dynamic Host Configuration Protocol service utility<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Trivial File Transfer Protocol transfer mechanism<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Trusted Automated Exchange of Intelligence Information (TAXII) is an application protocol designed for the secure, automated transmission and exchange of cyber threat intelligence information. Standardized as a RESTful web service operating over HTTPS, TAXII works hand-in-hand with Structured Threat Information Expression formatted data, allowing security systems, SOC platforms, and intelligence feeds to share indicators of compromise and threat actor profiles seamlessly. By automating intelligence feeds, TAXII enables security infrastructure to ingest new threat data rapidly and update defensive rules without manual administrative intervention.<\/span><\/p>\n<h3><b>Question 373<\/b><\/h3>\n<p><b>Which security assessment simulates real-world targeted cyber attacks?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Static application source code review analysis<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Automated vulnerability port scanning utility scan<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Penetration testing assessment engagement<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Passive network traffic log sniffing capture<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Penetration testing is an authorized, simulated cyber attack launched against a computer system, network, or web application to evaluate security posture and identify exploitable vulnerabilities. Performed by ethical hackers, penetration testing mimics the tactics, techniques, and procedures utilized by real-world threat actors to bypass defenses. The assessment uncovers weak configurations, unpatched software flaws, and architectural security gaps before malicious attackers can exploit them. Organizations utilize penetration testing findings to prioritize remediation efforts, validate security controls, and ensure compliance with various regulatory frameworks and industry standards.<\/span><\/p>\n<h3><b>Question 374<\/b><\/h3>\n<p><b>What Kubernetes feature restricts pod network traffic flows?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Kubernetes Network Policies specification<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Container bridge network interface<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Pod volume storage mount configuration<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Docker swarm cluster orchestration<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Kubernetes Network Policies are specifications that dictate how groups of pods are allowed to communicate with each other and with other network endpoints. By default, container communication in Kubernetes is non-namespaced and unisolated, allowing any pod to reach any other pod across the cluster. Implementing Network Policies enables micro-segmentation at the container level, ensuring that workloads only accept authorized traffic and restricting lateral movement within containerized microservices architectures, protecting applications from compromise even if a single microservice is breached.<\/span><\/p>\n<h3><b>Question 375<\/b><\/h3>\n<p><b>Which DNS extension implements cryptographic signature data verification?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Domain Name System Security Extensions (DNSSEC)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Dynamic Host Configuration Protocol option string<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Dynamic DNS record update mechanism protocol<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Network Time Protocol synchronization utility<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Domain Name System Security Extensions (DNSSEC) is a suite of cryptographic specifications developed by the IETF to secure information provided by the Domain Name System. Traditional DNS implementations lacked built-in authentication, leaving them vulnerable to cache poisoning, spoofing, and man-in-the-middle attacks where users are redirected to malicious websites. DNSSEC addresses this by cryptographically signing DNS records using public key cryptography. This allows client resolvers to verify the authenticity and integrity of responses, ensuring users connect to legitimate destination servers without malicious interception or data tampering across the internet.<\/span><\/p>\n<h3><b>Question 376<\/b><\/h3>\n<p><b>What encryption mode provides simultaneous confidentiality and integrity?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Electronic Codebook cipher mode implementation<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cipher Block Chaining standard mechanism<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Galois\/Counter Mode (GCM) authenticated encryption<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Plaintext session key sharing method<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Galois\/Counter Mode (GCM) is an authenticated encryption mode of operation designed to provide both data confidentiality and data integrity simultaneously within symmetric block ciphers like AES. Traditional encryption modes required separate mechanisms to verify integrity, leaving systems vulnerable to tampering if message authentication codes were omitted or misconfigured. GCM combines counter mode encryption with universal hashing over a Galois field, ensuring that any unauthorized modification to ciphertext or associated authentication data is detected instantly. Because of its high performance and robust security guarantees, GCM is heavily utilized in modern protocols such as TLS 1.3 to protect data in transit.<\/span><\/p>\n<h3><b>Question 377<\/b><\/h3>\n<p><b>Which email authentication standard utilizes cryptographic domain signatures?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Sender Policy Framework (SPF)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Domain-based Message Authentication and Reporting<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">DomainKeys Identified Mail (DKIM)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Simple Mail Transfer Protocol (SMTP)<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">DomainKeys Identified Mail (DKIM) is an email authentication method designed to detect email spoofing by providing a cryptographic mechanism to validate a domain name identity associated with a message through digital signing. The sending mail server signs the email header and body hashes with a private key, and the receiving server validates the signature using the sender&#8217;s public key published in the domain&#8217;s DNS records. DKIM ensures that the email was genuinely sent by the domain owner and that the message payload was not altered in transit, preventing sophisticated phishing attacks.<\/span><\/p>\n<h3><b>Question 378<\/b><\/h3>\n<p><b>What device inspects application-layer HTTP web traffic?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Unmanaged Layer 2 Ethernet bridge switch device<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Web Application Firewall (WAF) appliance or service<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Passive network packet sniffing capture probe<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Unshielded twisted-pair patch cable network link<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">A Web Application Firewall (WAF) is a specialized security appliance or cloud service designed to protect web applications by filtering, monitoring, and blocking HTTP\/HTTPS traffic traveling between web applications and client browsers. Unlike traditional network firewalls that operate at lower OSI layers, a WAF inspects Layer 7 application traffic specifically to detect and prevent common web exploits\u2014such as SQL injection, cross-site scripting, local file inclusion, and cookie tampering\u2014before malicious requests reach application backend databases. By utilizing signature matching, behavioral analysis, and negative\/positive security models, a WAF ensures that web services remain resilient against sophisticated application-layer cyber attacks.<\/span><\/p>\n<h3><b>Question 379<\/b><\/h3>\n<p><b>Which IPsec protocol provides data confidentiality and integrity?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Encapsulating Security Payload (ESP) protocol<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Authentication Header (AH) integrity protocol<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Transport Layer Security (TLS) handshake<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Secure Shell (SSH) remote protocol session<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The Encapsulating Security Payload (ESP) is an IPsec protocol designed to provide comprehensive security services, including data confidentiality (encryption), data integrity, data origin authentication, and anti-replay protection. In contrast, the IPsec Authentication Header (AH) protocol provides integrity and authentication but lacks encryption capabilities, leaving packet payloads transmitted in clear text. ESP encapsulates the original IP packet and encrypts the payload, ensuring that data transmitted across untrusted public networks remains secure from eavesdropping and tampering.<\/span><\/p>\n<h3><b>Question 380<\/b><\/h3>\n<p><b>What technology records endpoint behavioral telemetry for analysis?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Basic static signature-based antivirus software<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Endpoint Detection and Response (EDR) platform<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Unmanaged Layer 2 Ethernet bridge switch<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Passive network signal tap hub device<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Endpoint Detection and Response (EDR) is a sophisticated cybersecurity technology that continuously monitors end-user devices, servers, and hosts to collect deep behavioral telemetry, detect suspicious activities, and provide automated containment capabilities. Unlike traditional signature-based antivirus software that relied on static file matching to block known malware, EDR tools record process executions, file modifications, registry changes, and network connections in real time. This granular behavioral visibility enables security operations teams and threat hunters to identify zero-day exploits, fileless malware attacks, and advanced persistent threats that successfully evade traditional perimeter defenses, enabling rapid isolation and remediation.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>View Full Cisco CCNP Cybersecurity 350-201 Exam Dumps and Practice Test Dumps. &nbsp; Question 361 Which protocol enables secure remote administrative command-line access sessions? Unencrypted Telnet remote management session protocol Secure Shell (SSH) cryptographic network management protocol Trivial File Transfer Protocol file utility daemon Simple Network Management Protocol version 1 service Correct Answer: 2 Explanation: [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/14621"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=14621"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/14621\/revisions"}],"predecessor-version":[{"id":14669,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/14621\/revisions\/14669"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=14621"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=14621"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=14621"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}