
CiscoCertified Network Professional Security
Domain 2Objective 4
2.4 Select Management Options for Network Security Solutions (single vs. Multidevice Manager, In-Band vs. Out-Of-Band, On-Premises vs. Cloud with Cisco Security Cloud Control) 350-701 Practice Questions (Page 1)
Part of the Network Security domain, which accounts for 25% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 1–2 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)
24questions here
5free pages
5concepts
25%of the exam
Questions 1–5
- 1
A hospital network must keep all patient data and management traffic within its own data center due to strict data-residency regulations. They have 50 FTD devices that need centralized management. The IT team is experienced with maintaining servers. Which management deployment model is the most appropriate?
Select an answer first - 2
Which capability is provided by Cisco Security Cloud Control?
Select an answer first - 3
A company is using Cisco Security Cloud Control to manage FTD devices. They want to ensure that the configuration of their firewalls is backed up regularly. What is the recommended way to achieve this in Security Cloud Control?
Select an answer first - 4
Which factor is a key consideration when choosing between on-premises and cloud-based management for network security?
Select an answer first - 5
A global enterprise with firewalls in 40 countries needs to push a new security policy to all devices. The security team is small and cannot maintain a dedicated management server in every region. The company has a strict requirement that all management traffic must be encrypted and that the management platform must be accessible from anywhere without a VPN back to a central site. Which management solution is the best fit?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.