2.4 Select Management Options for Network Security Solutions (single vs. Multidevice Manager, In-Band vs. Out-Of-Band, On-Premises vs. Cloud with Cisco Security Cloud Control) 350-701 Practice Questions (Page 5)

Questions 21–24

1. 21expert · medium

   A network security team is designing the management network for a new data center. They have a requirement that the management plane must remain accessible even if the core switching fabric fails. They are considering using the same switches for both data and management traffic (in-band) versus deploying a separate management network (out-of-band). The budget is limited. What is the most important trade-off to consider in this decision?

   • AIn-band is faster; out-of-band is slower.
   • BIn-band is easier to secure; out-of-band is harder to secure.
   • CIn-band requires more cabling; out-of-band requires less cabling.
   • DIn-band is cheaper but less resilient; out-of-band is more resilient but more expensive.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is a key characteristic of out-of-band management for network security devices?

   • AManagement traffic uses a dedicated network path that is separate from production traffic.
   • BManagement is performed only through the device's web interface.
   • CManagement is performed only through the device's CLI.
   • DManagement traffic shares the same network path as production data traffic.
   Reveal Solution Discussion Select an answer first
4. 23application · easy

   A company is using Cisco Security Cloud Control to manage its FTD devices. They want to deploy a new security policy to a subset of their devices that are in a specific geographic region. How should they accomplish this in Security Cloud Control?

   • ACreate a device group for the region and assign the policy to that group.
   • BManually configure each device with the new policy via FDM.
   • CDeploy the policy to all devices and then exclude the ones not in the region.
   • DUse the CLI to configure each device in the region.
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A large enterprise is standardizing on FTD for all new deployments. They have a small central security team but a very large number of devices (500+). They are evaluating between an on-premises FMC and Cisco Security Cloud Control. The company has a policy that all management traffic must remain within their own network boundaries, but they also want to minimize the operational overhead of maintaining a management server. Which solution is the best fit?

   • AUse a hybrid: FMC for on-premises devices and Cloud Control for remote devices.
   • BUse Cisco Security Cloud Control.
   • CDeploy a pair of on-premises FMCs in high availability.
   • DUse a single on-premises FMC without high availability.
   Reveal Solution Discussion Select an answer first