Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Cisco 350-201 Exam - Topic 10 Question 110 Discussion

Posted by Edelmira on May 03, 2025 at 09:23 PM

Refer to the exhibit.

Which two steps mitigate attacks on the webserver from the Internet? (Choose two.)

Suggested Answer: B, D

Get Premium 350-201 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
30 comments · newest first
JO
Jordan 10 months ago
ACLs are a must, but I’d go with B and C instead.
ER
Eric 10 months ago
B is a solid choice, but A seems too restrictive.
ME
Melita 10 months ago
Definitely B and D! Proxy servers are key.
MI
Mitzie 11 months ago
I think A is important too, but not sure about D.
JE
Jerilyn 11 months ago
Wait, moving the webserver to the internal network? That sounds risky!
HU
Hubert 11 months ago
I vaguely recall something about allowing only external connections, but I can't remember if that's a good strategy for this scenario.
GE
Gertude 11 months ago
Moving the webserver to the internal network seems risky; I feel like it might expose it to other vulnerabilities.
PA
Paris 11 months ago
I think implementing a proxy server in the DMZ could definitely help mitigate attacks, similar to a practice question we did last week.
BR
Brittani 12 months ago
I remember studying about using ACLs to restrict traffic, but I'm not sure if allowing only TLS 1.3 is the best option here.
CO
Cory 12 months ago
This is a classic network security question. I'm confident I can select the two best mitigation steps based on the information provided.
HA
Harley 1 year ago
I think A and B are the right answers here. Creating an ACL for TLS 1.3 and implementing a proxy server in the DMZ should provide good protection.
VI
Vicente 1 year ago
I'm leaning towards options B and D, but I want to double-check the details in the exhibit to be sure.
DE
Demetra 1 year ago
Okay, let's think this through step-by-step. The key is to identify the two best ways to mitigate attacks from the internet on the webserver.
EA
Earleen 1 year ago
This question seems straightforward, but I want to make sure I understand the context correctly before answering.
FI
Filiberto 1 year ago
Haha, Arleen, you're a hacker at heart, aren't you? But seriously, B and D are the real deal. Don't mess with the DMZ, my friend.
SH
Shad 1 year ago
↳ replying to Filiberto
Yeah, we definitely don't want to mess with the DMZ. B and D it is.
CH
Chandra 1 year ago
↳ replying to Filiberto
I know, right? B and D are the way to go to protect the webserver.
AR
Arleen 1 year ago
Hey, what about option A? TLS 1.3 is the latest and greatest, shouldn't we be using that for security? *wink wink*
DI
Dick 1 year ago
I agree, B and D are the way to go. Gotta keep that web server away from the big bad internet!
MI
Mitsue 1 year ago
↳ replying to Dick
User4: Agreed, both options B and D can help mitigate attacks.
WA
Wai 1 year ago
↳ replying to Dick
User3: Moving the webserver to the internal network is also important.
HE
Herman 1 year ago
↳ replying to Dick
User2: Yeah, having a proxy server in the DMZ network can help.
VE
Vesta 1 year ago
↳ replying to Dick
User1: I think option B is a good idea.
LO
Loreta 1 year ago
I'm not sure about option C. It might still leave the webserver vulnerable.
JA
Jamal 1 year ago
I agree with Joanna. TLS 1.3 and a proxy server can help secure the webserver.
JO
Joanna 1 year ago
I think option A and B are the best choices.
KA
Karl 1 year ago
B and D seem like the best options to me. Putting the web server in the DMZ and using a proxy server should help protect it from direct internet attacks.
NA
Nan 1 year ago
↳ replying to Karl
Creating an ACL on the firewall to allow only TLS 1.3 is also a good measure to mitigate attacks.
JO
Joni 1 year ago
↳ replying to Karl
Moving the webserver to the internal network can also help protect it from direct internet attacks.
SH
Sherita 1 year ago
↳ replying to Karl
I agree, using a proxy server in the DMZ can add an extra layer of security.
0/2000 characters

Save Cancel