Cisco Exam 350-201 Topic 8 Question 104 Discussion

Actual exam question for Cisco's 350-201 exam

Question #: 104
Topic #: 8

A company recently completed an internal audit and discovered that there is CSRF vulnerability in 20 of its hosted applications. Based on the audit, which recommendation should an engineer make for patching?

AIdentify the business applications running on the assets

BUpdate software to patch third-party software

CValidate CSRF by executing exploits within Metasploit

DFix applications according to the risk scores

Show Suggested Answer

Suggested Answer: A

by France at Jan 15, 2025, 02:44 PM

Limited Time Offer

25%

Off

Get Premium 350-201 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Fallon

3 days ago

Haha, I'm pretty sure the auditors wouldn't appreciate us trying to 'exploit' the vulnerability. Let's stick to the safe and responsible options.

upvoted 0 times

...

Ruthann

6 days ago

I'm not sure Metasploit is the best tool for validating CSRF. That seems a bit risky, especially in a production environment.

upvoted 0 times

...

Lelia

8 days ago

Option D is the way to go. Patching the applications based on risk scores is the most effective approach to addressing the CSRF vulnerability.

upvoted 0 times

...

Theola

18 days ago

But shouldn't we also identify the business applications running on the assets first?

upvoted 0 times

...

Jose

20 days ago

I agree with Allene, it's important to prioritize based on risk.

upvoted 0 times

...

Allene

27 days ago

We should fix applications according to the risk scores.

upvoted 0 times

...