3.4 Describe Network, Application, and Data Security in Cloud Environments with Solutions Such as Cisco Multicloud Defense and Cisco Secure Workload 350-701 Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which architectural component is essential for Cisco Secure Workload to enforce micro-segmentation policies on workloads?

   • AAn agent installed on each workload that enforces policies
   • BA VPN concentrator that routes all workload traffic
   • CA physical firewall appliance in each network segment
   • DA central DNS server that resolves all workload names
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is the primary function of a Web Application Firewall (WAF) in a cloud environment?

   • ATo filter and monitor HTTP/HTTPS traffic to protect web applications from common attacks
   • BTo provide a virtual private network for remote users
   • CTo manage user identities and access permissions for cloud applications
   • DTo encrypt all data stored in cloud databases
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A company has a web application that is deployed in a cloud environment. The application is accessed by users over the internet. The security team wants to protect the application from common web attacks and also ensure that the application is not vulnerable to known CVEs in its dependencies. Which combination of controls should be implemented?

   • AImplement a vulnerability management process and rely on the cloud provider to patch the application.
   • BDeploy a WAF and implement a vulnerability management process for the application dependencies.
   • CUse only a WAF and rely on it to protect against all vulnerabilities.
   • DDeploy a network firewall and use a VPN for all users.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which of the following is a fundamental security challenge that is introduced or amplified when moving to a cloud environment?

   • AMisconfiguration of cloud resources and services
   • BPhysical theft of servers from the data center
   • CLack of network connectivity options
   • DInability to encrypt data at rest
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A company is migrating a three-tier application to AWS and Azure. The security team wants to apply consistent security policies across both clouds without managing separate native firewall rule sets. The workloads are primarily east-west traffic between application tiers. Which approach best meets this requirement?

   • APlace all workloads in a single cloud provider to simplify security management.
   • BDeploy Cisco Multicloud Defense with distributed gateways in each VPC/VNet and centrally manage security policies.
   • CUse Azure Firewall in the Azure environment and AWS Network Firewall in AWS, with separate rule sets.
   • DConfigure AWS Security Groups and Azure NSGs with identical rules in each environment.
   Reveal Solution Discussion Select an answer first