A Kubernetes cluster is shared by multiple teams. The security team wants to ensure that a compromised pod in one team's namespace cannot access resources in another team's namespace. Which control should they implement?

Disable the Kubernetes API server.

Use a single namespace for all teams to simplify management.

Grant all teams cluster-admin role.

Define NetworkPolicies that restrict cross-namespace traffic.

Which of the following is a secure deployment practice in a CI/CD pipeline?

Deploying directly from a developer's local machine to production

Storing deployment credentials in the pipeline configuration file in the repository

Disabling all logging during deployment to protect sensitive information

Using signed artifacts and verifying their integrity before deployment

A development team wants to automate security testing in their CI/CD pipeline. They want to identify vulnerabilities in the source code as soon as code is committed. Which type of testing should they integrate?

Dynamic application security testing (DAST)

Runtime application self-protection (RASP)

Static application security testing (SAST)

A company is developing a critical financial application. They want to ensure that security is considered throughout the development lifecycle, not just at the end. Which practice is most effective for integrating security into the SDLC?

Conduct a single penetration test just before the release.

Use only automated tools and skip manual reviews.

Rely on developers to write secure code without any formal process.

Perform threat modeling during design, SAST during development, and DAST before release.

CiscoCertified Network Professional Security

Domain 3Objective 7

3.7 Describe DevSecOps (Infrastructure as Code Security, CI/CD Pipeline, Container Orchestration, and Secure Software Development) 350-701 Practice Questions (Page 5)

Part of the Cloud Security domain, which accounts for 15% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–2 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

4concepts

15%of the exam

Questions 21–24

21application · medium
A Kubernetes cluster is shared by multiple teams. The security team wants to ensure that a compromised pod in one team's namespace cannot access resources in another team's namespace. Which control should they implement?
Select an answer first
22foundation · easy
Which of the following is a secure deployment practice in a CI/CD pipeline?
Select an answer first
23application · medium
A development team wants to automate security testing in their CI/CD pipeline. They want to identify vulnerabilities in the source code as soon as code is committed. Which type of testing should they integrate?
Select an answer first
24expert · hard
A company is developing a critical financial application. They want to ensure that security is considered throughout the development lifecycle, not just at the end. Which practice is most effective for integrating security into the SDLC?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to 350-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.