A company subscribes to a cloud-based customer relationship management (CRM) service. The security team wants to enforce multi-factor authentication (MFA) for all users and control data sharing with external parties. Where should these policies be configured?

In the CRM application's security settings

In the cloud provider's physical security controls

In the virtual network configuration

A company has a policy that all cloud resources must be tagged with an 'owner' and 'cost-center'. They want to enforce this policy automatically so that any resource created without the required tags is either denied or flagged. Which approach is most effective?

Use a cloud access security broker (CASB)

Use a policy-as-code tool to define and enforce tagging requirements

Rely on manual review of resources by the cloud team

Implement a data-loss prevention (DLP) policy

A company is adopting a SASE architecture. They need to ensure that all traffic from remote users to both SaaS applications and private cloud resources is secured and inspected. Which set of capabilities is essential for this SASE implementation?

Identity Provider (IdP) and Single Sign-On (SSO)

Secure Web Gateway (SWG) and Zero Trust Network Access (ZTNA)

Data Loss Prevention (DLP) and Intrusion Prevention System (IPS)

Cloud Access Security Broker (CASB) and Firewall

CiscoCertified Network Professional Security

Domain 3Objective 2

3.2 Select Security Capabilities, Deployment Models, Cloud Security Frameworks, and Policy Management to Secure the Cloud 350-701 Practice Questions (Page 6)

Part of the Cloud Security domain, which accounts for 15% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

5concepts

15%of the exam

Questions 26–29

26expert · medium
A government agency must share a common cloud infrastructure with other agencies that have similar security requirements, but they need to ensure that the infrastructure is not accessible to the general public. Which deployment model is most appropriate?
Select an answer first
27application · easy
A company subscribes to a cloud-based customer relationship management (CRM) service. The security team wants to enforce multi-factor authentication (MFA) for all users and control data sharing with external parties. Where should these policies be configured?
Select an answer first
28expert · hard
A company has a policy that all cloud resources must be tagged with an 'owner' and 'cost-center'. They want to enforce this policy automatically so that any resource created without the required tags is either denied or flagged. Which approach is most effective?
Select an answer first
29expert · hard
A company is adopting a SASE architecture. They need to ensure that all traffic from remote users to both SaaS applications and private cloud resources is secured and inspected. Which set of capabilities is essential for this SASE implementation?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to 350-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.

3.2 Select Security Capabilities, Deployment Models, Cloud Security Frameworks, and Policy Management to Secure the Cloud 350-701 Practice Questions (Page 6)

Questions 26–29

A government agency must share a common cloud infrastructure with other agencies that have similar security requirements, but they need to ensure that the infrastructure is not accessible to the general public. Which deployment model is most appropriate?

A company subscribes to a cloud-based customer relationship management (CRM) service. The security team wants to enforce multi-factor authentication (MFA) for all users and control data sharing with external parties. Where should these policies be configured?

A company has a policy that all cloud resources must be tagged with an 'owner' and 'cost-center'. They want to enforce this policy automatically so that any resource created without the required tags is either denied or flagged. Which approach is most effective?

A company is adopting a SASE architecture. They need to ensure that all traffic from remote users to both SaaS applications and private cloud resources is secured and inspected. Which set of capabilities is essential for this SASE implementation?

Keep studying — Cloud Security