CiscoCertified Network Professional Security
Domain 3Objective 3
3.3 Select Security Solutions for Cloud Environments (public; Private; Hybrid; Community Cloud; NIST 800-145 SaaS, PaaS, and IaaS; and Cloud Access Security Broker) 350-701 Practice Questions (Page 2)
Part of the Cloud Security domain, which accounts for 15% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–2 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)
26questions here
6free pages
5concepts
15%of the exam
Questions 6–10
- 6
A financial services firm must move a customer-facing web application to the cloud. Regulatory requirements mandate that the underlying infrastructure be dedicated to the firm and that the firm retains full control over the hypervisor and network configuration. The application is expected to have steady, predictable usage. Which cloud deployment and service model combination best meets these requirements?
Select an answer first - 7
A company wants to use a cloud service to run their customer relationship management (CRM) application without having to manage the underlying infrastructure or the application itself. They only need to configure the application to their business processes. Which cloud service model should they select?
Select an answer first - 8
A large enterprise wants to migrate its on-premises data center to the cloud, but some legacy applications cannot be moved due to licensing and latency constraints. They want to maintain a consistent security posture across the on-premises and cloud environments. Which deployment model and security solution should they adopt?
Select an answer first - 9
In a SaaS model, which security responsibility typically remains with the cloud provider?
Select an answer first - 10
A company wants to prevent sensitive data from being shared externally via a sanctioned cloud storage service. They need to enforce policies that block the upload of files containing credit card numbers. Which CASB function should be configured?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.