Cisco Exam 350-201 Topic 11 Question 98 Discussion

Actual exam question for Cisco's 350-201 exam

Question #: 98
Topic #: 11

An organization suffered a security breach in which the attacker exploited a Netlogon Remote Protocol vulnerability for further privilege escalation. Which two actions should the incident response team take to

prevent this type of attack from reoccurring? (Choose two.)

AImplement a patch management process.

BScan the company server files for known viruses.

CApply existing patches to the company servers.

DAutomate antivirus scans of the company servers.

EDefine roles and responsibilities in the incident response playbook.

Show Suggested Answer

Suggested Answer: D, E

by Agustin at Sep 18, 2024, 02:47 AM

Limited Time Offer

25%

Off

Get Premium 350-201 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Raylene

8 months ago

A and E, all the way. Gotta have that incident response plan in place, and patching is just common sense. Unless, of course, you want to be the next victim of a Netlogon attack. Not me, thanks!

upvoted 0 times

...

Maryanne

8 months ago

I'd pick A and C, no doubt. Patch management is the bread and butter of security. And remember, an unpatched system is like a cheese sandwich - it's just begging to be hacked!

upvoted 0 times

Sang

7 months ago

Definitely, keeping servers updated is key to preventing attacks.

upvoted 0 times

...

Teri

7 months ago

Absolutely, patch management is crucial for security.

upvoted 0 times

...

Rima

7 months ago

A) Implement a patch management process.

upvoted 0 times

...

Lettie

7 months ago

C) Apply existing patches to the company servers.

upvoted 0 times

...

Tu

8 months ago

B and D? Really? Scanning for viruses and automating antivirus scans won't do anything to fix the Netlogon vulnerability. C'mon, people, let's focus on the real issues here.

upvoted 0 times

...

Golda

8 months ago

Hmm, I'd say A and E are the way to go. Incident response planning is just as important as patching. Can't have a good response without clearly defined roles and responsibilities.

upvoted 0 times

Junita

7 months ago

C) Apply existing patches to the company servers.

upvoted 0 times

...

Mitzie

8 months ago

E) Define roles and responsibilities in the incident response playbook.

upvoted 0 times

...

Arthur

8 months ago

A) Implement a patch management process.

upvoted 0 times

...

Eun

9 months ago

Automating antivirus scans of the company servers could also help prevent future attacks.

upvoted 0 times

...

Dyan

9 months ago

I agree with Ellsworth. Applying existing patches to the company servers is also important.

upvoted 0 times

...

Ellsworth

9 months ago

I think we should implement a patch management process.

upvoted 0 times

...

Wilford

9 months ago

Definitely go with A and C. Patching systems is crucial to prevent these types of attacks. The vulnerability in the Netlogon protocol needs to be addressed ASAP.

upvoted 0 times

Dawne

8 months ago

Definitely go with A and C. Patching systems is crucial to prevent these types of attacks. The vulnerability in the Netlogon protocol needs to be addressed ASAP.

upvoted 0 times

...

Stephen

8 months ago

C) Apply existing patches to the company servers.

upvoted 0 times

...

Nakisha

8 months ago

A) Implement a patch management process.

upvoted 0 times

...