4.3 Configure Cisco Secure Access Secure Private Access 350-701 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company has deployed a connector for Cisco Secure Access in its data center. The connector is running but the administrator notices that the connector status in the dashboard shows as 'Unhealthy'. Which action should the administrator take to resolve this?

   • ACheck the connector's outbound connectivity to the Secure Access cloud and verify that required ports are open.
   • BRestart the connector service on the host.
   • CReinstall the connector with a new registration token.
   • DVerify that the connector has a public IP address.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which statement best describes the architecture of Cisco Secure Access?

   • AIt is a single centralized data center that all traffic must backhaul to for inspection.
   • BIt is a cloud-native platform that uses a distributed network of points of presence (PoPs) to provide security enforcement close to the user.
   • CIt is a hybrid model where all security policies are enforced by the customer's existing firewalls and only logging is done in the cloud.
   • DIt is an on-premises appliance that must be deployed in each branch office to provide security services.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   An organization is deploying Cisco Secure Access and wants to use its existing Okta tenant for user authentication. The administrator has already configured the Okta integration in the Secure Access dashboard. What additional step is required to ensure that users can authenticate and be authorized for private application access?

   • ACreate a Secure Private Access policy that references the Okta identity provider and defines which users or groups can access which applications.
   • BDeploy a connector in the same region as the Okta tenant to ensure low-latency authentication.
   • CConfigure the Okta tenant to send all user traffic through the Secure Access cloud.
   • DCreate a new Secure Access portal and assign the Okta integration to it.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the primary purpose of integrating Cisco Secure Access with an identity provider (IdP)?

   • ATo replace the need for the Secure Access connector.
   • BTo encrypt traffic between the user and the private application.
   • CTo provide a backup for the Secure Access portal.
   • DTo authenticate users and obtain identity information for policy enforcement.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   An administrator is configuring Secure Private Access for a company that uses multiple identity providers. Some users are in Okta, and others are in Azure AD. The company wants to grant access to a private application to users from both IdPs, but only if they are in the 'Managers' group in their respective IdP. What is the best way to configure this?

   • ACreate a single policy that matches all users and set the condition to 'Managers' in both IdPs.
   • BCreate a single policy that matches all users and set the group condition to 'Managers'.
   • CCreate two Secure Private Access policies: one for Okta users in the 'Managers' group and one for Azure AD users in the 'Managers' group.
   • DUse the connector to filter users based on their IdP.
   Reveal Solution Discussion Select an answer first