A company uses IaaS VMs and PaaS services. The security team wants to implement a consistent encryption strategy for data in transit. Which approach is most appropriate?

Encrypt data only in PaaS services, as IaaS traffic is not at risk

Rely on the provider's default encryption for all services

Disable encryption to reduce latency

Use TLS for all application traffic and configure VPN or ExpressRoute for administrative access

A company deploys a containerized application to a PaaS platform. The security team requires that all container images be scanned for vulnerabilities before deployment. The team also needs to enforce that only images from a private registry are used. Which combination of controls should the team implement?

Configure the PaaS platform to block all image deployments and require manual approval

Manually review all images and deploy them without registry restrictions

Integrate the PaaS platform with a container image scanning service and configure the platform to allow only images from the private registry

Use only the PaaS platform's built-in image scanning and rely on the provider's default registry policy

Which security control is the customer expected to implement in a PaaS environment?

Managing the runtime environment's security patches

Configuring the hypervisor's network isolation

Securing the physical servers that host the platform

Implementing application-level authentication and authorization

A security architect is comparing IaaS and PaaS for a new application. The application requires the team to install a custom database and manage its configuration. Which consideration is most relevant when choosing between IaaS and PaaS?

PaaS requires the customer to manage the hypervisor

PaaS always provides stronger security than IaaS because the provider manages more components

IaaS provides more control over the OS and database, while PaaS reduces management overhead but limits customization

IaaS eliminates the customer's responsibility for patching the OS

A security architect is evaluating the shared responsibility model for a new application. The application will use IaaS VMs for compute and a PaaS database for storage. The architect needs to document which party is responsible for patching the database engine and the guest OS. What is the correct documentation?

The customer patches both the database engine and the guest OS

The provider patches the database engine; the customer patches the guest OS

The provider patches both the database engine and the guest OS

The customer patches the database engine; the provider patches the guest OS

CiscoCertified Network Professional Cybersecurity (CBRCOR)

Domain 1Objective 10

1.10 Compare Security Operations Considerations of Cloud Platforms Such as IaaS, PaaS 350-201 Practice Questions (Page 6)

Part of the Fundamentals domain, which accounts for 20% of the 350-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

5concepts

20%of the exam

Questions 26–30

26expert · hard
A company uses IaaS VMs and PaaS services. The security team wants to implement a consistent encryption strategy for data in transit. Which approach is most appropriate?
Select an answer first
27expert · hard
A company deploys a containerized application to a PaaS platform. The security team requires that all container images be scanned for vulnerabilities before deployment. The team also needs to enforce that only images from a private registry are used. Which combination of controls should the team implement?
Select an answer first
28foundation · easy
Which security control is the customer expected to implement in a PaaS environment?
Select an answer first
29application · medium
A security architect is comparing IaaS and PaaS for a new application. The application requires the team to install a custom database and manage its configuration. Which consideration is most relevant when choosing between IaaS and PaaS?
Select an answer first
30expert · hard
A security architect is evaluating the shared responsibility model for a new application. The application will use IaaS VMs for compute and a PaaS database for storage. The architect needs to document which party is responsible for patching the database engine and the guest OS. What is the correct documentation?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-201” is a trademark of its owner, used for identification only.

1.10 Compare Security Operations Considerations of Cloud Platforms Such as IaaS, PaaS 350-201 Practice Questions (Page 6)

Questions 26–30

A company uses IaaS VMs and PaaS services. The security team wants to implement a consistent encryption strategy for data in transit. Which approach is most appropriate?

Which security control is the customer expected to implement in a PaaS environment?

A security architect is comparing IaaS and PaaS for a new application. The application requires the team to install a custom database and manage its configuration. Which consideration is most relevant when choosing between IaaS and PaaS?

Keep studying — Fundamentals