3.4 Describe Network, Application, and Data Security in Cloud Environments with Solutions Such as Cisco Multicloud Defense and Cisco Secure Workload 350-701 Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A company is using Cisco Multicloud Defense to secure traffic between workloads in different VPCs in AWS. The security team wants to ensure that all traffic between these VPCs is inspected and that no traffic can bypass the inspection. Which deployment consideration is most important?

   • AEnsure that all VPC peering connections are removed and traffic is routed through the Multicloud Defense gateways.
   • BEnsure that the VPCs are in the same AWS region.
   • CEnsure that the security groups allow all traffic between the VPCs.
   • DEnsure that the Multicloud Defense gateways are deployed in a single availability zone.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which practice is a key component of secure application development in the cloud?

   • AUsing the same credentials for all environments to simplify management
   • BDisabling all logging to reduce the attack surface
   • CDeploying applications directly to production without testing to speed up delivery
   • DPerforming security testing and code reviews throughout the development lifecycle
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the primary purpose of micro-segmentation in a cloud network security architecture?

   • ATo provide a single point of ingress for all external traffic
   • BTo consolidate multiple cloud accounts into a single network segment
   • CTo create fine-grained security policies that isolate individual workloads or application tiers
   • DTo replace the need for traditional firewalls entirely
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company uses Cisco Secure Workload in its on-premises data center and is now extending its environment to AWS. The security team wants to use Cisco Multicloud Defense for network security in AWS. They want to ensure that the security policies for workloads in AWS are consistent with the micro-segmentation policies in the data center. What is the best way to achieve this?

   • AUse Cisco Secure Workload to manage policies for both environments and use Multicloud Defense for network enforcement in AWS.
   • BUse Cisco Multicloud Defense to manage policies for both environments and use Secure Workload for enforcement in the data center.
   • CManage policies separately in Secure Workload and Multicloud Defense.
   • DUse only Multicloud Defense in both environments.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company is adopting a multi-cloud strategy with workloads in AWS, Azure, and Google Cloud. The security team wants to enforce consistent internet-bound (north-south) traffic inspection and prevent lateral movement between workloads in different clouds. They want a single management console for all security policies. Which architecture should be recommended?

   • ADeploy Cisco Multicloud Defense gateways in each cloud and manage them from a single controller.
   • BDeploy a separate Cisco Secure Workload cluster in each cloud.
   • CUse each cloud provider's native firewall and manage them separately.
   • DRoute all traffic through a single on-premises data center for inspection.
   Reveal Solution Discussion Select an answer first