A security architect is designing a hybrid cloud solution. The company has a compliance requirement that all data must remain in a specific geographic region. The architect is considering using IaaS VMs and a PaaS database service. Which consideration is most important for meeting the data residency requirement?

Deploying both the IaaS VMs and the PaaS database in the same cloud region that meets the compliance requirement

Encrypting all data in transit between the IaaS VMs and the PaaS database

Using a VPN to connect the IaaS VMs to the PaaS database

Configuring the PaaS database to use a customer-managed key for encryption

A company must choose between IaaS and PaaS for a new application. The application has strict compliance requirements that mandate the customer to control the OS and middleware. The team also wants to minimize operational overhead. Which approach best satisfies both constraints?

Use PaaS and rely on the provider to manage the OS and middleware

Use PaaS and request a custom runtime from the provider

Use IaaS and accept the higher operational overhead to maintain control over the OS and middleware

Use IaaS but outsource all security responsibilities to the provider

A security team is designing monitoring for a hybrid environment that includes both IaaS VMs and PaaS services. They need a unified view of security events across both platforms. Which approach is most effective?

Rely on the provider's security alerts only

Monitor IaaS VMs only, as PaaS services are secure by default

Use separate monitoring tools for IaaS and PaaS without integration

Aggregate logs from both IaaS and PaaS into a centralized SIEM

Which security control is commonly used in both IaaS and PaaS to restrict who can access cloud resources?

Identity and access management (IAM)

In an IaaS environment, which operational security aspect is the customer responsible for?

Monitoring the data center's cooling systems

Monitoring the physical host's hardware health

Monitoring the hypervisor's performance

Monitoring the guest OS for security events

CiscoCertified Network Professional Cybersecurity (CBRCOR)

Domain 1Objective 10

1.10 Compare Security Operations Considerations of Cloud Platforms Such as IaaS, PaaS 350-201 Practice Questions (Page 4)

Part of the Fundamentals domain, which accounts for 20% of the 350-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

5concepts

20%of the exam

Questions 16–20

16expert · hard
A security architect is designing a hybrid cloud solution. The company has a compliance requirement that all data must remain in a specific geographic region. The architect is considering using IaaS VMs and a PaaS database service. Which consideration is most important for meeting the data residency requirement?
Select an answer first
17expert · hard
A company must choose between IaaS and PaaS for a new application. The application has strict compliance requirements that mandate the customer to control the OS and middleware. The team also wants to minimize operational overhead. Which approach best satisfies both constraints?
Select an answer first
18expert · hard
A security team is designing monitoring for a hybrid environment that includes both IaaS VMs and PaaS services. They need a unified view of security events across both platforms. Which approach is most effective?
Select an answer first
19foundation · easy
Which security control is commonly used in both IaaS and PaaS to restrict who can access cloud resources?
Select an answer first
20foundation · easy
In an IaaS environment, which operational security aspect is the customer responsible for?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-201” is a trademark of its owner, used for identification only.