A cloud service provider has obtained FedRAMP authorization at the Moderate impact level. A federal agency wants to use the service for a system that processes data at the High impact level. What must the provider do to support this agency's use case?

Obtain a SOC 2 Type II report instead

Request the agency to lower its impact level

Provide the agency with the existing FedRAMP Moderate package

Undergo a separate FedRAMP assessment for the High impact level

Which entity is most directly affected by FedRAMP requirements?

A public company that must report financial controls

A European bank that handles EU citizen data

A cloud service provider seeking to sell its services to US federal agencies

A retail company that processes credit card payments

A federal agency is migrating its financial management system to a cloud service provider. The system processes sensitive financial data and is subject to FISMA. The agency also has SOX-like internal control requirements due to its role in federal financial reporting. The cloud provider has FedRAMP authorization at the Moderate level. Which action is most appropriate for the agency to ensure compliance?

Verify that the FedRAMP authorization covers the system's impact level and that the provider's controls address financial reporting integrity

Rely solely on the FedRAMP Moderate authorization without further review

Request the provider to implement SOX controls

Require the provider to obtain a SOC 1 report instead of FedRAMP

CiscoCertified Network Professional Cybersecurity (CBRCOR)

Domain 1Objective 4

1.4 Infer the Industry for Various Compliance Standards Such as PCI, FISMA, FedRAMP, SOC, SOX, PCI, GDPR, Data Privacy, and ISO 27101 350-201 Practice Questions (Page 5)

Part of the Fundamentals domain, which accounts for 20% of the 350-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

8concepts

20%of the exam

Questions 21–25

21foundation · easy
Which regulation provides data protection and privacy rights to individuals within the European Union and the European Economic Area?
Select an answer first
22expert · hard
A cloud service provider has obtained FedRAMP authorization at the Moderate impact level. A federal agency wants to use the service for a system that processes data at the High impact level. What must the provider do to support this agency's use case?
Select an answer first
23foundation · easy
Which entity is most directly affected by FedRAMP requirements?
Select an answer first
24application · medium
An online retailer based in the United States sells digital goods to customers in the European Union. The retailer stores customer names, email addresses, and payment card numbers. Which two compliance frameworks are most directly applicable to this retailer's operations?
Select an answer first
25expert · hard
A federal agency is migrating its financial management system to a cloud service provider. The system processes sensitive financial data and is subject to FISMA. The agency also has SOX-like internal control requirements due to its role in federal financial reporting. The cloud provider has FedRAMP authorization at the Moderate level. Which action is most appropriate for the agency to ensure compliance?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-201” is a trademark of its owner, used for identification only.

1.4 Infer the Industry for Various Compliance Standards Such as PCI, FISMA, FedRAMP, SOC, SOX, PCI, GDPR, Data Privacy, and ISO 27101 350-201 Practice Questions (Page 5)

Questions 21–25

Which regulation provides data protection and privacy rights to individuals within the European Union and the European Economic Area?

A cloud service provider has obtained FedRAMP authorization at the Moderate impact level. A federal agency wants to use the service for a system that processes data at the High impact level. What must the provider do to support this agency's use case?

Which entity is most directly affected by FedRAMP requirements?

An online retailer based in the United States sells digital goods to customers in the European Union. The retailer stores customer names, email addresses, and payment card numbers. Which two compliance frameworks are most directly applicable to this retailer's operations?

Keep studying — Fundamentals