3.4 Describe Network, Application, and Data Security in Cloud Environments with Solutions Such as Cisco Multicloud Defense and Cisco Secure Workload 350-701 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which capability is provided by Cisco Multicloud Defense to protect applications in the cloud?

   • AData backup and recovery services
   • BOn-premises firewall hardware management
   • CPhysical security guards for cloud data centers
   • DWeb application firewall (WAF) capabilities to filter malicious HTTP/HTTPS traffic
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company has a VPC in AWS with a web tier, application tier, and database tier. The security team wants to ensure that the database tier is only accessible from the application tier and not from the internet or other VPCs. They also want to log all traffic to the database. Which solution should they implement?

   • AUse Cisco Multicloud Defense to create a segmentation policy that allows only the application tier to reach the database and enables traffic logging.
   • BUse AWS WAF on the database tier.
   • CPlace the database in a separate VPC and use VPC peering.
   • DConfigure the database tier's security group to allow all traffic from the VPC CIDR.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is a key benefit of integrating Cisco Secure Workload with Cisco Multicloud Defense?

   • AIt eliminates the need for any cloud provider's native security features
   • BIt provides a single solution for all security needs, including identity management
   • CIt allows security policies to be based on application dependencies and enforced consistently across multiple clouds
   • DIt automatically migrates workloads between clouds
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   How does Cisco Secure Workload provide threat detection for workloads?

   • ABy physically inspecting each server in the data center
   • BBy analyzing network traffic and workload behavior for anomalies and known indicators of compromise
   • CBy requiring all workloads to use the same operating system
   • DBy blocking all inbound traffic to workloads
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A security analyst is investigating a potential breach in a data center. The team needs to understand the communication paths between workloads to identify which systems may have been compromised. The workloads are running on VMware ESXi and bare-metal servers. Which Cisco Secure Workload capability should be used first?

   • APolicy enforcement to block all traffic between workloads.
   • BApplication Dependency Mapping (ADM) to visualize communication flows.
   • CForensic snapshot of a single workload.
   • DThreat intelligence feeds to identify known malicious IPs.
   Reveal Solution Discussion Select an answer first