CiscoCertified Network Professional Security
Domain 3Objective 3
3.3 Select Security Solutions for Cloud Environments (public; Private; Hybrid; Community Cloud; NIST 800-145 SaaS, PaaS, and IaaS; and Cloud Access Security Broker) 350-701 Practice Questions (Page 1)
Part of the Cloud Security domain, which accounts for 15% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–2 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)
26questions here
6free pages
5concepts
15%of the exam
Questions 1–5
- 1
A startup wants to deploy a web application without managing servers, but they need to have control over the application code and data. They also want to avoid the complexity of managing the runtime environment. Which cloud service model is most appropriate?
Select an answer first - 2
A company is moving a legacy application to the cloud and needs to maintain full control over the operating system and middleware to meet custom security requirements. Which cloud service model should they select?
Select an answer first - 3
Which CASB function is primarily concerned with discovering shadow IT and assessing the risk of cloud applications?
Select an answer first - 4
A company is using an IaaS cloud provider to host a virtual machine running a custom application. The security team is responsible for patching the operating system and application. Which security responsibility is the cloud provider responsible for?
Select an answer first - 5
A company uses a PaaS cloud service to deploy a web application. The provider manages the runtime environment, but the company is responsible for the application code and data. Which of the following is the company responsible for securing?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.