A company runs a critical application on IaaS VMs. The security team wants to implement a security control that provides visibility into network traffic between VMs in the same virtual network. Which control is most appropriate for this requirement?

Network security group (NSG) flow logs

A security operations team is designing an incident response plan for a workload that will run on a PaaS platform. The team needs to ensure that security events from the application layer are collected and analyzed. Which approach should the team implement?

Rely on the provider's hypervisor logs for application-level visibility

Enable application-level logging and integrate it with a SIEM

Deploy a network tap on the provider's physical infrastructure

Request the provider's OS-level audit logs for the application host

Which of the following is a customer responsibility when using an IaaS cloud service?

Replacing failed physical hard drives

Applying security patches to the virtual machine's operating system

Configuring the hypervisor's security settings

Ensuring the data center's fire suppression system is operational

CiscoCertified Network Professional Cybersecurity (CBRCOR)

Domain 1Objective 10

1.10 Compare Security Operations Considerations of Cloud Platforms Such as IaaS, PaaS 350-201 Practice Questions (Page 8)

Part of the Fundamentals domain, which accounts for 20% of the 350-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

5concepts

20%of the exam

Questions 36–38

36application · medium
A company runs a critical application on IaaS VMs. The security team wants to implement a security control that provides visibility into network traffic between VMs in the same virtual network. Which control is most appropriate for this requirement?
Select an answer first
37application · medium
A security operations team is designing an incident response plan for a workload that will run on a PaaS platform. The team needs to ensure that security events from the application layer are collected and analyzed. Which approach should the team implement?
Select an answer first
38foundation · easy
Which of the following is a customer responsibility when using an IaaS cloud service?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to 350-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-201” is a trademark of its owner, used for identification only.

1.10 Compare Security Operations Considerations of Cloud Platforms Such as IaaS, PaaS 350-201 Practice Questions (Page 8)

Questions 36–38

A company runs a critical application on IaaS VMs. The security team wants to implement a security control that provides visibility into network traffic between VMs in the same virtual network. Which control is most appropriate for this requirement?

A security operations team is designing an incident response plan for a workload that will run on a PaaS platform. The team needs to ensure that security events from the application layer are collected and analyzed. Which approach should the team implement?

Which of the following is a customer responsibility when using an IaaS cloud service?

Keep studying — Fundamentals