A company is using a SaaS application for HR management. They need to ensure that the application is compliant with GDPR and that data is not transferred outside the EU. They also want to monitor user access and detect anomalies. Which solution should they implement?

A CASB with data residency controls and user behavior analytics

In the shared responsibility model for cloud security, which party is responsible for patching the guest operating system of a virtual machine in an IaaS deployment?

Both the provider and the customer equally

A company is using a public cloud IaaS environment and a private cloud for different workloads. They want to implement a single solution to provide visibility into user activity, enforce data loss prevention, and detect threats across both environments. They also need to ensure that the solution can integrate with their existing identity provider. Which solution should they choose?

A separate SIEM for each environment

A cloud-native security group configuration

A CASB that supports multi-cloud and integrates with the identity provider

A company subscribes to a cloud-based email and collaboration suite (SaaS). The security team wants to ensure that data is encrypted both in transit and at rest. Who is responsible for implementing encryption at rest for the email data?

The cloud provider, because they manage the storage infrastructure

The customer, because they control the data

Both customer and provider share equal responsibility

The customer's end users, because they create the data

A multinational company operates a hybrid cloud environment. They use a private cloud for sensitive data processing and a public cloud for less sensitive workloads. They need to enforce consistent security policies across both environments, including data loss prevention and threat protection for cloud applications. They also need visibility into user activity in the public cloud SaaS apps. Which solution should they implement?

Use a VPN to connect the two clouds

Deploy a CASB that covers both the private and public cloud environments

Deploy a separate firewall in each environment

Migrate all workloads to the public cloud

CiscoCertified Network Professional Security

Domain 3Objective 3

3.3 Select Security Solutions for Cloud Environments (public; Private; Hybrid; Community Cloud; NIST 800-145 SaaS, PaaS, and IaaS; and Cloud Access Security Broker) 350-701 Practice Questions (Page 3)

Part of the Cloud Security domain, which accounts for 15% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–2 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

5concepts

15%of the exam

Questions 11–15

11expert · medium
A company is using a SaaS application for HR management. They need to ensure that the application is compliant with GDPR and that data is not transferred outside the EU. They also want to monitor user access and detect anomalies. Which solution should they implement?
Select an answer first
12foundation · easy
In the shared responsibility model for cloud security, which party is responsible for patching the guest operating system of a virtual machine in an IaaS deployment?
Select an answer first
13expert · medium
A company is using a public cloud IaaS environment and a private cloud for different workloads. They want to implement a single solution to provide visibility into user activity, enforce data loss prevention, and detect threats across both environments. They also need to ensure that the solution can integrate with their existing identity provider. Which solution should they choose?
Select an answer first
14application · medium
A company subscribes to a cloud-based email and collaboration suite (SaaS). The security team wants to ensure that data is encrypted both in transit and at rest. Who is responsible for implementing encryption at rest for the email data?
Select an answer first
15expert · medium
A multinational company operates a hybrid cloud environment. They use a private cloud for sensitive data processing and a public cloud for less sensitive workloads. They need to enforce consistent security policies across both environments, including data loss prevention and threat protection for cloud applications. They also need visibility into user activity in the public cloud SaaS apps. Which solution should they implement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.

3.3 Select Security Solutions for Cloud Environments (public; Private; Hybrid; Community Cloud; NIST 800-145 SaaS, PaaS, and IaaS; and Cloud Access Security Broker) 350-701 Practice Questions (Page 3)

Questions 11–15

A company is using a SaaS application for HR management. They need to ensure that the application is compliant with GDPR and that data is not transferred outside the EU. They also want to monitor user access and detect anomalies. Which solution should they implement?

In the shared responsibility model for cloud security, which party is responsible for patching the guest operating system of a virtual machine in an IaaS deployment?

A company subscribes to a cloud-based email and collaboration suite (SaaS). The security team wants to ensure that data is encrypted both in transit and at rest. Who is responsible for implementing encryption at rest for the email data?

Keep studying — Cloud Security