A financial services firm is evaluating a private cloud deployment for its most sensitive transaction processing systems. The firm will build the private cloud on dedicated hardware located in a provider's data center. The provider will manage the physical environment, power, and cooling. The firm will manage the virtualization layer and all guest operating systems. Which security responsibility belongs to the firm?

Maintaining the physical servers in the data center

Securing the hypervisor and the virtual machines running on it

Ensuring redundant power and cooling are available

Protecting the data center from unauthorized physical access

A company is using a PaaS database service. The provider manages the database server and the underlying OS. The company's security team is responsible for the data stored in the database. Which security control must the company implement?

Patching the database server software

Securing the physical server hosting the database

Managing the database server's network firewall

Encrypting the data before storing it in the database

A company is using a public cloud IaaS provider to host a customer-facing application. The company stores customer PII in a database on a virtual machine. The provider is responsible for the physical security of the data center and the hypervisor. Which security control must the company implement to protect the PII?

Encrypting the database files stored on the virtual machine's disk

Managing the network infrastructure between the data centers

Patching the hypervisor to prevent VM escape attacks

Securing the physical access to the data center

Which security aspect is typically the responsibility of the cloud service provider?

Configuring network security groups

Encrypting customer data stored in the cloud

Managing user access to cloud resources

Physical security of the data center

A company is using a SaaS CRM application. The provider manages the application and the infrastructure. The company's security team is performing a risk assessment. Which item is the company's responsibility?

Patching the operating system of the CRM servers

Managing the CRM application's underlying database

Securing the physical data center where the CRM is hosted

Configuring the CRM application's user roles and permissions

CiscoCertified Network Professional Security

Domain 3Objective 1

3.1 Describe Security Responsibility Within Common Cloud Shared Responsibility Models 350-701 Practice Questions (Page 4)

Part of the Cloud Security domain, which accounts for 15% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–2 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

7concepts

15%of the exam

Questions 16–20

16application · medium
A financial services firm is evaluating a private cloud deployment for its most sensitive transaction processing systems. The firm will build the private cloud on dedicated hardware located in a provider's data center. The provider will manage the physical environment, power, and cooling. The firm will manage the virtualization layer and all guest operating systems. Which security responsibility belongs to the firm?
Select an answer first
17expert · hard
A company is using a PaaS database service. The provider manages the database server and the underlying OS. The company's security team is responsible for the data stored in the database. Which security control must the company implement?
Select an answer first
18application · medium
A company is using a public cloud IaaS provider to host a customer-facing application. The company stores customer PII in a database on a virtual machine. The provider is responsible for the physical security of the data center and the hypervisor. Which security control must the company implement to protect the PII?
Select an answer first
19foundation · easy
Which security aspect is typically the responsibility of the cloud service provider?
Select an answer first
20application · medium
A company is using a SaaS CRM application. The provider manages the application and the infrastructure. The company's security team is performing a risk assessment. Which item is the company's responsibility?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.

3.1 Describe Security Responsibility Within Common Cloud Shared Responsibility Models 350-701 Practice Questions (Page 4)

Questions 16–20

A company is using a PaaS database service. The provider manages the database server and the underlying OS. The company's security team is responsible for the data stored in the database. Which security control must the company implement?

Which security aspect is typically the responsibility of the cloud service provider?

A company is using a SaaS CRM application. The provider manages the application and the infrastructure. The company's security team is performing a risk assessment. Which item is the company's responsibility?

Keep studying — Cloud Security