Question 23

Question

DRAG DROP Drag and drop the phases to evaluate the security posture of an asset from the left onto the activity that happens during the phases on the right. https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/350-201/page_10_img_1.jpg

Taylor O. · Answer

Just to be sure, is the focus here on the attacker's perspective or a blue team assessment? If it's from an attacker's POV, activities like persistence and cover tracks happen after exploit, but for a defender's assessment these might not apply. That detail would totally flip what phases match with which actions.

Adam L. · Answer

vulnerability assessment → confirming existence of vulnerabilities, exploit → gain access, persistence → insert backdoor, cover tracks → erase traces, reconnaissance → gather info, enumeration → probe OS details. Seen similar on other practice tests, and persistence is a tempting trap for that first one but fits better with backdoors.

Ravi S. · Answer

reconnaissance → gathering information, enumeration → probing target, vulnerability assessment → confirming vulnerabilities, exploit → gain access, persistence → inserting backdoor, cover tracks → erasing traces.I swapped reconnaissance and enumeration because I thought enumeration was mainly about OS and service discovery, but maybe I'm mixing up some stages. Pretty sure persistence goes with backdoors here. Not 100% though if the mapping expects exact attacker order. Anyone disagree?

Cisco 350-201 Real Exam Questions [October 2026 Update] Quiz

Premium Access Includes