Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25

- Free Preparation Discussions

Cisco 350-201 Exam - Topic 10 Question 110 Discussion

Actual exam question for Cisco's 350-201 exam

Question #: 110
Topic #: 10

[All 350-201 Questions]

Refer to the exhibit.

Which two steps mitigate attacks on the webserver from the Internet? (Choose two.)

ACreate an ACL on the firewall to allow only TLS 1.3

BImplement a proxy server in the DMZ network

CCreate an ACL on the firewall to allow only external connections

DMove the webserver to the internal network

Show Suggested Answer

Suggested Answer: B, D

by Edelmira at May 03, 2025, 09:23 PM

Limited Time Offer

25%

Off

Get Premium 350-201 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jordan

8 months ago

ACLs are a must, but I’d go with B and C instead.

upvoted 0 times

...

Eric

9 months ago

B is a solid choice, but A seems too restrictive.

upvoted 0 times

...

Melita

9 months ago

Definitely B and D! Proxy servers are key.

upvoted 0 times

...

Mitzie

9 months ago

I think A is important too, but not sure about D.

upvoted 0 times

...

Jerilyn

9 months ago

Wait, moving the webserver to the internal network? That sounds risky!

upvoted 0 times

...

Hubert

9 months ago

I vaguely recall something about allowing only external connections, but I can't remember if that's a good strategy for this scenario.

upvoted 0 times

...

Gertude

10 months ago

Moving the webserver to the internal network seems risky; I feel like it might expose it to other vulnerabilities.

upvoted 0 times

...

Paris

10 months ago

I think implementing a proxy server in the DMZ could definitely help mitigate attacks, similar to a practice question we did last week.

upvoted 0 times

...

Brittani

10 months ago

I remember studying about using ACLs to restrict traffic, but I'm not sure if allowing only TLS 1.3 is the best option here.

upvoted 0 times

...

Cory

10 months ago

This is a classic network security question. I'm confident I can select the two best mitigation steps based on the information provided.

upvoted 0 times

...

Harley

11 months ago

I think A and B are the right answers here. Creating an ACL for TLS 1.3 and implementing a proxy server in the DMZ should provide good protection.

upvoted 0 times

...

Vicente

11 months ago

I'm leaning towards options B and D, but I want to double-check the details in the exhibit to be sure.

upvoted 0 times

...

Demetra

11 months ago

Okay, let's think this through step-by-step. The key is to identify the two best ways to mitigate attacks from the internet on the webserver.

upvoted 0 times

...

Earleen

11 months ago

This question seems straightforward, but I want to make sure I understand the context correctly before answering.

upvoted 0 times

...

Filiberto

1 year ago

Haha, Arleen, you're a hacker at heart, aren't you? But seriously, B and D are the real deal. Don't mess with the DMZ, my friend.

upvoted 0 times

Shad

1 year ago

Yeah, we definitely don't want to mess with the DMZ. B and D it is.

upvoted 0 times

...

Chandra

1 year ago

I know, right? B and D are the way to go to protect the webserver.

upvoted 0 times

...

...

Arleen

1 year ago

Hey, what about option A? TLS 1.3 is the latest and greatest, shouldn't we be using that for security? *wink wink*

upvoted 0 times

...

Dick

1 year ago

I agree, B and D are the way to go. Gotta keep that web server away from the big bad internet!

upvoted 0 times

Mitsue

1 year ago

User4: Agreed, both options B and D can help mitigate attacks.

upvoted 0 times

...

Wai

1 year ago

User3: Moving the webserver to the internal network is also important.

upvoted 0 times

...

Herman

1 year ago

User2: Yeah, having a proxy server in the DMZ network can help.

upvoted 0 times

...

Vesta

1 year ago

User1: I think option B is a good idea.

upvoted 0 times

...

...

Loreta

1 year ago

I'm not sure about option C. It might still leave the webserver vulnerable.

upvoted 0 times

...

Jamal

1 year ago

I agree with Joanna. TLS 1.3 and a proxy server can help secure the webserver.

upvoted 0 times

...

Joanna

1 year ago

I think option A and B are the best choices.

upvoted 0 times

...

Karl

1 year ago

B and D seem like the best options to me. Putting the web server in the DMZ and using a proxy server should help protect it from direct internet attacks.

upvoted 0 times

Nan

1 year ago

Creating an ACL on the firewall to allow only TLS 1.3 is also a good measure to mitigate attacks.

upvoted 0 times

...

Joni

1 year ago

Moving the webserver to the internal network can also help protect it from direct internet attacks.

upvoted 0 times

...

Sherita

1 year ago

I agree, using a proxy server in the DMZ can add an extra layer of security.

upvoted 0 times

...

...