CiscoCertified Network Professional Security
Domain 3Objective 2
3.2 Select Security Capabilities, Deployment Models, Cloud Security Frameworks, and Policy Management to Secure the Cloud 350-701 Practice Questions (Page 1)
Part of the Cloud Security domain, which accounts for 15% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)
29questions here
6free pages
5concepts
15%of the exam
Questions 1–5
- 1
A company runs containerized microservices on a managed Kubernetes service. The security team needs to scan container images for vulnerabilities before deployment and enforce runtime security policies on the containers. Which set of capabilities is most appropriate?
Select an answer first - 2
A company uses Microsoft 365 for email and collaboration, Salesforce for CRM, and AWS for custom application hosting. The security team needs a single control point to enforce data-loss-prevention policies on sanctioned SaaS apps, discover shadow IT, and provide visibility into user activity across these environments. Which solution should they deploy?
Select an answer first - 3
A company is using a PaaS offering to deploy a web application. The security team is responsible for securing the application code and managing user access, but the provider is responsible for the runtime environment. A vulnerability is discovered in the application framework. Who is responsible for patching it?
Select an answer first - 4
Which cloud deployment model is characterized by infrastructure that is shared by several organizations with common interests, such as a specific industry or compliance requirement?
Select an answer first - 5
Which security capability is specifically designed to enforce security policies and provide visibility when users access cloud applications from their own devices?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.