In an IaaS deployment, which security responsibility is typically assigned to the customer according to the shared responsibility model?

Securing the physical data center

Managing the guest operating system

Maintaining the network switches

A security operations team is responding to a security incident involving a PaaS application. The team needs to determine whether the application's data was exfiltrated. Which data source should the team analyze first?

The hypervisor's security event logs

Application-level logs that record data access and export operations

The provider's physical network logs

The provider's infrastructure change logs

A security analyst is investigating a suspected breach of an IaaS VM. Which data source is most likely to provide evidence of the initial access vector?

Cloud provider's physical data center access logs

VM guest OS security event logs

Cloud provider's billing records

A security operations team is setting up monitoring for a new IaaS workload. They need to detect unauthorized changes to the guest OS and file system. Which approach is most appropriate?

Enable platform-level logging only

Install a host-based intrusion detection system (HIDS) on the VM

Use a cloud security posture management (CSPM) tool

A security operations center (SOC) is setting up monitoring for a new PaaS application. The SOC needs to detect suspicious authentication attempts against the application. Which data source should the SOC primarily rely on?

Application-level authentication logs

Provider's infrastructure audit logs

CiscoCertified Network Professional Cybersecurity (CBRCOR)

Domain 1Objective 10

1.10 Compare Security Operations Considerations of Cloud Platforms Such as IaaS, PaaS 350-201 Practice Questions (Page 5)

Part of the Fundamentals domain, which accounts for 20% of the 350-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

5concepts

20%of the exam

Questions 21–25

21foundation · easy
In an IaaS deployment, which security responsibility is typically assigned to the customer according to the shared responsibility model?
Select an answer first
22expert · hard
A security operations team is responding to a security incident involving a PaaS application. The team needs to determine whether the application's data was exfiltrated. Which data source should the team analyze first?
Select an answer first
23application · medium
A security analyst is investigating a suspected breach of an IaaS VM. Which data source is most likely to provide evidence of the initial access vector?
Select an answer first
24application · medium
A security operations team is setting up monitoring for a new IaaS workload. They need to detect unauthorized changes to the guest OS and file system. Which approach is most appropriate?
Select an answer first
25application · medium
A security operations center (SOC) is setting up monitoring for a new PaaS application. The SOC needs to detect suspicious authentication attempts against the application. Which data source should the SOC primarily rely on?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-201” is a trademark of its owner, used for identification only.