Where is the Cisco Secure Access connector typically deployed?

At the identity provider's data center.

In the customer's network, on a virtual machine or server that has outbound internet access.

In the Cisco Secure Access cloud, as a managed service.

On the user's endpoint device, as an agent.

A company is deploying Cisco Secure Access and wants to provide users with a single portal where they can access both SaaS applications and private applications. What should the administrator configure?

Use the identity provider's portal for all applications.

Create a Secure Access portal that includes both SaaS applications and private applications.

Configure the connector to proxy SaaS applications.

Create two separate portals: one for SaaS and one for private applications.

An administrator is configuring Secure Private Access for a company that uses Azure AD as its identity provider. The company wants to grant access to a private application only to users who are members of the 'Finance' group in Azure AD. The administrator has already integrated Azure AD with Cisco Secure Access. What is the next step to enforce this requirement?

Create a new Secure Access portal and assign the 'Finance' group to it.

Create a Secure Private Access policy that matches the application and sets the condition to 'Finance' group from Azure AD.

Assign the 'Finance' group to the connector that serves the application.

Configure the application in Azure AD to require the 'Finance' group.

An organization is integrating Cisco Secure Access with its identity provider. The administrator wants to enforce multi-factor authentication (MFA) for all users accessing private applications. The identity provider supports MFA. What is the most efficient way to enforce this?

Configure the identity provider to require MFA for the Secure Access application.

Use a separate identity provider for MFA.

Configure the connector to require MFA for private application access.

Create a Secure Private Access policy that requires MFA.

A user reports they cannot access a private application through Cisco Secure Access. What is a common first step to troubleshoot this issue?

Reinstall the Secure Access connector.

Check the Secure Access dashboard for any policy blocks or session errors for that user.

Change the user's group membership in the identity provider.

Reboot the user's endpoint device.

CiscoCertified Network Professional Security

Domain 4Objective 3

4.3 Configure Cisco Secure Access Secure Private Access 350-701 Practice Questions (Page 5)

Part of the Secure Service Edge domain, which accounts for 10% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

6concepts

10%of the exam

Questions 21–25

21foundation · easy
Where is the Cisco Secure Access connector typically deployed?
Select an answer first
22application · medium
A company is deploying Cisco Secure Access and wants to provide users with a single portal where they can access both SaaS applications and private applications. What should the administrator configure?
Select an answer first
23application · medium
An administrator is configuring Secure Private Access for a company that uses Azure AD as its identity provider. The company wants to grant access to a private application only to users who are members of the 'Finance' group in Azure AD. The administrator has already integrated Azure AD with Cisco Secure Access. What is the next step to enforce this requirement?
Select an answer first
24expert · hard
An organization is integrating Cisco Secure Access with its identity provider. The administrator wants to enforce multi-factor authentication (MFA) for all users accessing private applications. The identity provider supports MFA. What is the most efficient way to enforce this?
Select an answer first
25foundation · easy
A user reports they cannot access a private application through Cisco Secure Access. What is a common first step to troubleshoot this issue?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.