Cisco Exam 350-201 Topic 3 Question 68 Discussion

Actual exam question for Cisco's 350-201 exam

Question #: 68
Topic #: 3

A customer is using a central device to manage network devices over SNMPv2. A remote attacker caused a denial of service condition and can trigger this vulnerability by issuing a GET request for the ciscoFlashMIB OID on an affected device. Which should be disabled to resolve the issue?

ASNMPv2

BTCP small services

Cport UDP 161 and 162

DUDP small services

Show Suggested Answer

Suggested Answer: C

by Joseph at Mar 28, 2023, 07:34 PM

Limited Time Offer

25%

Off

Get Premium 350-201 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lina

1 months ago

This is a classic case of 'the problem is not the problem, the problem is your reaction to the problem.' Disable the whole network, that'll show them!

upvoted 0 times

Christene

2 days ago

D: Let's disable UDP small services as well just to be safe.

upvoted 0 times

...

Glory

9 days ago

C: We also need to disable port UDP 161 and 162.

upvoted 0 times

...

Kerrie

16 days ago

B: But what about TCP small services?

upvoted 0 times

...

Linwood

18 days ago

A: We should disable SNMPv2 to resolve the issue.

upvoted 0 times

...

Shannan

1 months ago

You know, if I were the attacker, I'd probably just try to use a different OID to trigger the vulnerability. Disabling the MIB seems like a Band-Aid solution.

upvoted 0 times

...

Noah

1 months ago

I disagree. Disabling the specific ports used by SNMP, 161 and 162, would be the most targeted approach. That way, you don't have to completely disable the protocol.

upvoted 0 times

Cassie

12 days ago

Agreed, disabling the ports would be a targeted approach to address the vulnerability.

upvoted 0 times

...

Leslie

15 days ago

I think disabling the specific ports used by SNMP, 161 and 162, would be more effective.

upvoted 0 times

...

Rosalyn

20 days ago

Disabling SNMPv2 would be the best option to resolve the issue.

upvoted 0 times

...

Cathrine

2 months ago

I'm not sure about that. Disabling TCP small services or UDP small services might be a better option. Those could also be contributing to the problem.

upvoted 0 times