2.4 Select Management Options for Network Security Solutions (single vs. Multidevice Manager, In-Band vs. Out-Of-Band, On-Premises vs. Cloud with Cisco Security Cloud Control) 350-701 Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A network administrator is managing a firewall that is also the default gateway for a critical application. The administrator needs to apply a new QoS policy. The administrator is currently connected via SSH over the management interface, which is in a dedicated management VRF. The data plane is experiencing high utilization. What is the primary risk of making this change in-band?

   • AThe management traffic could be dropped if the data plane is congested.
   • BThe management VRF will be automatically disabled when the QoS policy is applied.
   • CThe SSH session will be encrypted, making it immune to congestion.
   • DThe QoS policy will not take effect until the firewall is rebooted.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the primary role of Cisco Security Cloud Control?

   • AIt is an on-premises appliance that provides centralized logging for all network devices.
   • BIt is a protocol used to securely connect remote users to the corporate network.
   • CIt is a firewall product that provides next-generation security features.
   • DIt is a cloud-based platform for managing multiple Cisco security products from a single dashboard.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is a primary security implication of using in-band management for network security devices?

   • AManagement traffic is automatically routed through a separate VPN for security.
   • BManagement traffic is exposed to the same network threats as production traffic.
   • CManagement traffic is isolated from production traffic, reducing attack surface.
   • DManagement traffic is encrypted by default and cannot be intercepted.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   An organization needs to manage security devices across multiple geographically distributed sites and wants to reduce on-premises infrastructure. Which management option best meets this requirement?

   • AIn-band management using the production network.
   • BCloud-based multidevice management.
   • COn-premises management with a dedicated management server at each site.
   • DSingle-device management via local console access.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company is migrating from on-premises Cisco Security Manager to a cloud-based management platform. They have a mix of ASA, FTD, and Meraki MX devices. The security team wants a single pane of glass for policy management and visibility, and they want to avoid managing the underlying management infrastructure. Which platform should they choose?

   • ACisco Prime Infrastructure
   • BCisco DNA Center
   • CCisco Defense Orchestrator (standalone)
   • DCisco Security Cloud Control
   Reveal Solution Discussion Select an answer first