A financial services company wants to replace its on-premises firewalls and web proxies with a cloud-based solution that provides URL filtering, intrusion prevention, and application control for all remote users. The company does not need SD-WAN. Which SSE service should be selected?

Zero Trust Network Access (ZTNA)

Cloud Access Security Broker (CASB)

A multinational corporation with offices in regions that have strict data residency laws is planning a SASE deployment. The company must ensure that traffic from users in a specific country does not leave that country's borders. The SASE provider offers points of presence (PoPs) in multiple regions. What is the most important consideration when selecting the SASE provider?

The provider must have PoPs in the required country and support local traffic egress and policy enforcement

The provider must offer a comprehensive CASB solution

The provider must support MPLS integration

The provider must offer SD-WAN with link bonding

A company currently uses a cloud-based security stack for remote users and plans to add SD-WAN for branch connectivity. The security team wants to ensure that the new SD-WAN solution can integrate with the existing security services to enforce consistent policies. Which architectural approach should the company adopt?

Keep the security stack separate and use SD-WAN only for connectivity

Use SD-WAN to route all traffic to the data center for security inspection

Replace the security stack with a traditional firewall at each branch

Adopt a SASE architecture that converges the SD-WAN and security services

CiscoCertified Network Professional Security

Domain 4Objective 1

4.1 Describe Security Service Edge (SSE) and Secure Access Service Edge (SASE) 350-701 Practice Questions (Page 4)

Part of the Secure Service Edge domain, which accounts for 10% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

5concepts

10%of the exam

Questions 16–20

16application · medium
A law firm has remote attorneys who need to access internal case management systems and also use cloud-based document sharing. The firm wants to enforce multi-factor authentication (MFA) for access to internal systems and prevent data leakage in cloud apps. Which SSE services should be combined?
Select an answer first
17application · medium
A financial services company wants to replace its on-premises firewalls and web proxies with a cloud-based solution that provides URL filtering, intrusion prevention, and application control for all remote users. The company does not need SD-WAN. Which SSE service should be selected?
Select an answer first
18expert · hard
A multinational corporation with offices in regions that have strict data residency laws is planning a SASE deployment. The company must ensure that traffic from users in a specific country does not leave that country's borders. The SASE provider offers points of presence (PoPs) in multiple regions. What is the most important consideration when selecting the SASE provider?
Select an answer first
19application · medium
A multinational corporation is evaluating a cloud platform that offers SD-WAN, SWG, CASB, ZTNA, and FWaaS as integrated services. The company wants to reduce complexity by using a single vendor for both network connectivity and security. Which term best describes this platform?
Select an answer first
20application · medium
A company currently uses a cloud-based security stack for remote users and plans to add SD-WAN for branch connectivity. The security team wants to ensure that the new SD-WAN solution can integrate with the existing security services to enforce consistent policies. Which architectural approach should the company adopt?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.

4.1 Describe Security Service Edge (SSE) and Secure Access Service Edge (SASE) 350-701 Practice Questions (Page 4)

Questions 16–20

A law firm has remote attorneys who need to access internal case management systems and also use cloud-based document sharing. The firm wants to enforce multi-factor authentication (MFA) for access to internal systems and prevent data leakage in cloud apps. Which SSE services should be combined?

A financial services company wants to replace its on-premises firewalls and web proxies with a cloud-based solution that provides URL filtering, intrusion prevention, and application control for all remote users. The company does not need SD-WAN. Which SSE service should be selected?

A multinational corporation is evaluating a cloud platform that offers SD-WAN, SWG, CASB, ZTNA, and FWaaS as integrated services. The company wants to reduce complexity by using a single vendor for both network connectivity and security. Which term best describes this platform?

Keep studying — Secure Service Edge