3.4 Describe Network, Application, and Data Security in Cloud Environments with Solutions Such as Cisco Multicloud Defense and Cisco Secure Workload 350-701 Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A company has a multi-cloud environment with workloads in AWS and Azure. They are deploying Cisco Multicloud Defense. They have a requirement that all traffic between the two clouds must be encrypted and inspected. They also want to ensure that if a gateway in one cloud fails, traffic can still flow. Which deployment architecture should be used?

   • AUse native cloud peering between AWS and Azure and rely on native firewalls.
   • BDeploy a single gateway in each cloud and use a VPN connection between them.
   • CDeploy gateways in a single cloud and route all traffic from the other cloud through it.
   • DDeploy multiple gateways in each cloud in an active-active configuration and use IPsec tunnels between the clouds.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the primary purpose of Cisco Secure Workload?

   • ATo provide workload protection and micro-segmentation across data centers and clouds
   • BTo replace the need for any network firewalls
   • CTo provide a web application firewall for cloud applications
   • DTo manage user identities and access permissions
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which architectural component is central to Cisco Multicloud Defense's ability to enforce security policies in a cloud environment?

   • AA single VPN tunnel that routes all cloud traffic to an on-premises data center
   • BA centralized management plane that distributes policies to distributed enforcement points
   • CA physical firewall appliance installed in each cloud data center
   • DA software agent installed only on the cloud provider's hypervisor
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A development team is deploying a new web application to a cloud environment. The application will handle sensitive user data. The security team requires that the application be protected against SQL injection and cross-site scripting (XSS) attacks, and that all data transmitted between the user and the application be encrypted. Which set of controls should be implemented?

   • AEnforce HTTPS with TLS and encrypt the database at rest.
   • BDeploy a WAF and encrypt the database at rest.
   • CUse a VPN for all user connections and deploy a network firewall.
   • DDeploy a WAF in front of the application and enforce HTTPS with TLS.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the primary goal of Data Loss Prevention (DLP) in a cloud environment?

   • ATo detect and prevent unauthorized transmission or exposure of sensitive data
   • BTo encrypt all data stored in the cloud
   • CTo manage access permissions for cloud resources
   • DTo provide backup and disaster recovery for cloud data
   Reveal Solution Discussion Select an answer first