A company wants to enforce a policy that blocks access to a cloud application from unmanaged devices while allowing access from managed devices. Which security capability should they use?

Security Information and Event Management (SIEM)

Which cloud policy management practice is primarily used to enforce data protection by restricting access based on user identity and context?

Data loss prevention (DLP) policies

A company is using a CSPM tool to continuously monitor its cloud environment for misconfigurations. The tool flags a storage bucket that is publicly accessible. What is the primary security capability of the CSPM tool in this scenario?

Scanning for vulnerabilities in applications

CiscoCertified Network Professional Security

Domain 3Objective 2

3.2 Select Security Capabilities, Deployment Models, Cloud Security Frameworks, and Policy Management to Secure the Cloud 350-701 Practice Questions (Page 4)

Part of the Cloud Security domain, which accounts for 15% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

5concepts

15%of the exam

Questions 16–20

16application · medium
A company wants to enforce a policy that blocks access to a cloud application from unmanaged devices while allowing access from managed devices. Which security capability should they use?
Select an answer first
17foundation · easy
Which cloud policy management practice is primarily used to enforce data protection by restricting access based on user identity and context?
Select an answer first
18foundation · easy
Which cloud service model typically shifts the most security responsibility to the cloud provider, including application security and data handling?
Select an answer first
19application · easy
A company is using a CSPM tool to continuously monitor its cloud environment for misconfigurations. The tool flags a storage bucket that is publicly accessible. What is the primary security capability of the CSPM tool in this scenario?
Select an answer first
20foundation · easy
Which cloud deployment model offers the most direct control over physical security and hardware configuration, assuming the infrastructure is located on the organization's premises?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.

3.2 Select Security Capabilities, Deployment Models, Cloud Security Frameworks, and Policy Management to Secure the Cloud 350-701 Practice Questions (Page 4)

Questions 16–20

A company wants to enforce a policy that blocks access to a cloud application from unmanaged devices while allowing access from managed devices. Which security capability should they use?

Which cloud policy management practice is primarily used to enforce data protection by restricting access based on user identity and context?

Which cloud service model typically shifts the most security responsibility to the cloud provider, including application security and data handling?

A company is using a CSPM tool to continuously monitor its cloud environment for misconfigurations. The tool flags a storage bucket that is publicly accessible. What is the primary security capability of the CSPM tool in this scenario?

Which cloud deployment model offers the most direct control over physical security and hardware configuration, assuming the infrastructure is located on the organization's premises?

Keep studying — Cloud Security