Which statement best describes Secure Access Service Edge (SASE)?

A cloud-delivered security service that replaces traditional firewalls

A framework that converges network connectivity and security services in the cloud

A hardware-based approach to secure remote access

A set of APIs that integrate security tools with cloud applications

In the SASE framework, what is the relationship between SSE and SASE?

They are independent frameworks with no overlap

SSE is a subset of SASE that provides the security services

They are two names for the same set of services

SASE is a subset of SSE that provides the networking services

A regional bank is migrating its 2,000 remote employees from an on-premises VPN concentrator to a cloud-delivered security model. The bank must enforce internet browsing policies, block malware downloads, and provide granular access to sanctioned SaaS applications without backhauling traffic to the data center. Which SSE component should the bank deploy FIRST to meet the internet security requirements?

Zero Trust Network Access (ZTNA)

Cloud Access Security Broker (CASB)

A global enterprise has 5,000 remote employees who access both SaaS applications and internal legacy applications hosted in a data center. The company wants to enforce consistent security policies for both types of access, but the legacy applications require network-level access. The security team is considering a pure ZTNA approach. What is the most significant limitation of this approach?

ZTNA may not support legacy applications that require network-level access, so a hybrid approach with VPN or FWaaS may be needed

ZTNA cannot enforce multi-factor authentication

ZTNA requires all traffic to be backhauled to the data center

ZTNA does not provide any security for SaaS applications

CiscoCertified Network Professional Security

Domain 4Objective 1

4.1 Describe Security Service Edge (SSE) and Secure Access Service Edge (SASE) 350-701 Practice Questions (Page 3)

Part of the Secure Service Edge domain, which accounts for 10% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

5concepts

10%of the exam

Questions 11–15

11foundation · easy
Which statement best describes Secure Access Service Edge (SASE)?
Select an answer first
12foundation · easy
In the SASE framework, what is the relationship between SSE and SASE?
Select an answer first
13application · medium
A regional bank is migrating its 2,000 remote employees from an on-premises VPN concentrator to a cloud-delivered security model. The bank must enforce internet browsing policies, block malware downloads, and provide granular access to sanctioned SaaS applications without backhauling traffic to the data center. Which SSE component should the bank deploy FIRST to meet the internet security requirements?
Select an answer first
14expert · hard
A global enterprise has 5,000 remote employees who access both SaaS applications and internal legacy applications hosted in a data center. The company wants to enforce consistent security policies for both types of access, but the legacy applications require network-level access. The security team is considering a pure ZTNA approach. What is the most significant limitation of this approach?
Select an answer first
15application · medium
A university allows students and faculty to use any device to access the internet and cloud applications. The IT department wants to enforce content filtering, block malicious sites, and provide visibility into shadow IT usage. Which combination of SSE components should the university deploy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.

4.1 Describe Security Service Edge (SSE) and Secure Access Service Edge (SASE) 350-701 Practice Questions (Page 3)

Questions 11–15

Which statement best describes Secure Access Service Edge (SASE)?

In the SASE framework, what is the relationship between SSE and SASE?

A university allows students and faculty to use any device to access the internet and cloud applications. The IT department wants to enforce content filtering, block malicious sites, and provide visibility into shadow IT usage. Which combination of SSE components should the university deploy?

Keep studying — Secure Service Edge