A company is evaluating Cisco Secure Access as its SSE solution. The security team wants to ensure that all internet traffic from both on-premises and remote users is secured. The company has a main office with a firewall and a group of remote workers. Which deployment model should be recommended?

A DNS-based model for all users

A hybrid model using an IPsec tunnel from the main office and the Cisco Secure Access client for remote users

A site-based model using an IPsec tunnel from the main office only

A client-based model for all users, including those in the main office

A small business with 50 users wants to secure its internet traffic using Cisco Secure Access. They have no on-premises infrastructure and all users work remotely. The administrator needs to ensure that all internet traffic from these users is inspected by the cloud security stack. Which configuration is required?

Create a policy that only inspects traffic to known business applications

Configure a site-to-site VPN from a central office to the Cisco Secure Access cloud

Set up a DNS-based redirect on the company's domain controller

Install the Cisco Secure Access client on each user's device and configure it to route all traffic to the cloud

An administrator is integrating Cisco Secure Access with Azure AD. The goal is to enforce different internet policies for 'Contractors' and 'Employees'. The integration is complete, and both groups are visible in the Cisco Secure Access dashboard. However, when a contractor signs in, they receive the 'Employees' policy. What is the most likely cause?

The Azure AD integration is not syncing group membership correctly

The contractor's user account is a member of both the 'Contractors' and 'Employees' groups in Azure AD

The 'Contractors' policy is configured for a different traffic type

The 'Contractors' group is not mapped to a policy in Cisco Secure Access

CiscoCertified Network Professional Security

Domain 4Objective 2

4.2 Configure Cisco Secure Access Secure Internet Access 350-701 Practice Questions (Page 1)

Part of the Secure Service Edge domain, which accounts for 10% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

6concepts

10%of the exam

Questions 1–5

1application · medium
A company is evaluating Cisco Secure Access as its SSE solution. The security team wants to ensure that all internet traffic from both on-premises and remote users is secured. The company has a main office with a firewall and a group of remote workers. Which deployment model should be recommended?
Select an answer first
2application · medium
A small business with 50 users wants to secure its internet traffic using Cisco Secure Access. They have no on-premises infrastructure and all users work remotely. The administrator needs to ensure that all internet traffic from these users is inspected by the cloud security stack. Which configuration is required?
Select an answer first
3foundation · easy
Which security function in Cisco Secure Access is responsible for blocking access to malicious websites?
Select an answer first
4application · medium
An administrator is integrating Cisco Secure Access with Azure AD. The goal is to enforce different internet policies for 'Contractors' and 'Employees'. The integration is complete, and both groups are visible in the Cisco Secure Access dashboard. However, when a contractor signs in, they receive the 'Employees' policy. What is the most likely cause?
Select an answer first
5foundation · easy
When troubleshooting a user's inability to access a website, which log would you examine to see if the URL was blocked by policy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.

4.2 Configure Cisco Secure Access Secure Internet Access 350-701 Practice Questions (Page 1)

Questions 1–5

A company is evaluating Cisco Secure Access as its SSE solution. The security team wants to ensure that all internet traffic from both on-premises and remote users is secured. The company has a main office with a firewall and a group of remote workers. Which deployment model should be recommended?

Which security function in Cisco Secure Access is responsible for blocking access to malicious websites?

When troubleshooting a user's inability to access a website, which log would you examine to see if the URL was blocked by policy?

Keep studying — Secure Service Edge