CiscoCertified Network Professional Security
Domain 4Objective 1
4.1 Describe Security Service Edge (SSE) and Secure Access Service Edge (SASE) 350-701 Practice Questions (Page 5)
Part of the Secure Service Edge domain, which accounts for 10% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)
25questions here
5free pages
5concepts
10%of the exam
Questions 21–25
- 21
Which service would be included in a SASE solution but NOT in a standalone SSE solution?
Select an answer first - 22
A company is deploying SSE to secure remote users. The security team wants to enforce conditional access policies based on user identity, device posture, and location. They also need to provide access to internal applications without exposing the entire network. Which SSE service should be configured to meet these requirements?
Select an answer first - 23
A managed security provider offers a cloud-based service that includes SWG, CASB, ZTNA, and FWaaS to protect remote users. The provider does not offer SD-WAN or any network transport services. How should this offering be classified?
Select an answer first - 24
A global enterprise is deploying SASE across 500 branch offices. The company has a mix of high-bandwidth applications (video conferencing) and latency-sensitive applications (VoIP). The SASE provider offers multiple PoPs and SD-WAN features. What is the most important SD-WAN capability to ensure optimal performance for these applications?
Select an answer first - 25
A logistics company with 300 delivery hubs needs to connect each hub to the internet and to a central cloud-based security platform. The hubs have varying bandwidth requirements and the company wants to use multiple internet links for redundancy. Which SASE capability should be configured at each hub?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
No more pagesBack to 350-701
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.