An organization uses multiple SaaS applications (e.g., Salesforce, Office 365) and wants to enforce data loss prevention (DLP) policies on sensitive data being uploaded to these apps. The organization also needs visibility into user activity across these apps. Which solution should be deployed?

An identity provider (IdP) with single sign-on

A web application firewall (WAF) in front of each SaaS app

A next-generation firewall (NGFW) placed at the internet edge

A Cloud Access Security Broker (CASB)

A company is using an IaaS cloud to host a database server. The security team needs to ensure that the database is encrypted at rest. Who is responsible for implementing the encryption?

The customer, because they control the VM and operating system

Both the provider and customer equally

The database vendor, because they provide the software

The cloud provider, because they manage the storage

CiscoCertified Network Professional Security

Domain 3Objective 3

3.3 Select Security Solutions for Cloud Environments (public; Private; Hybrid; Community Cloud; NIST 800-145 SaaS, PaaS, and IaaS; and Cloud Access Security Broker) 350-701 Practice Questions (Page 5)

Part of the Cloud Security domain, which accounts for 15% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–2 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

5concepts

15%of the exam

Questions 21–25

21foundation · easy
An organization requires a cloud environment that combines its on-premises private cloud with a public cloud provider, using orchestration to manage workloads across both. Which deployment model does this represent?
Select an answer first
22application · medium
An organization wants to ensure that only compliant cloud services are used by employees. They need to assess the compliance posture of various SaaS applications and block those that do not meet standards. Which CASB function should they use?
Select an answer first
23foundation · easy
A university consortium shares a cloud infrastructure to support collaborative research projects. The infrastructure is operated by a third-party provider, but access is restricted to the consortium members. Which cloud deployment model does this describe?
Select an answer first
24application · medium
An organization uses multiple SaaS applications (e.g., Salesforce, Office 365) and wants to enforce data loss prevention (DLP) policies on sensitive data being uploaded to these apps. The organization also needs visibility into user activity across these apps. Which solution should be deployed?
Select an answer first
25application · medium
A company is using an IaaS cloud to host a database server. The security team needs to ensure that the database is encrypted at rest. Who is responsible for implementing the encryption?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.

3.3 Select Security Solutions for Cloud Environments (public; Private; Hybrid; Community Cloud; NIST 800-145 SaaS, PaaS, and IaaS; and Cloud Access Security Broker) 350-701 Practice Questions (Page 5)

Questions 21–25

An organization requires a cloud environment that combines its on-premises private cloud with a public cloud provider, using orchestration to manage workloads across both. Which deployment model does this represent?

An organization wants to ensure that only compliant cloud services are used by employees. They need to assess the compliance posture of various SaaS applications and block those that do not meet standards. Which CASB function should they use?

A university consortium shares a cloud infrastructure to support collaborative research projects. The infrastructure is operated by a third-party provider, but access is restricted to the consortium members. Which cloud deployment model does this describe?

An organization uses multiple SaaS applications (e.g., Salesforce, Office 365) and wants to enforce data loss prevention (DLP) policies on sensitive data being uploaded to these apps. The organization also needs visibility into user activity across these apps. Which solution should be deployed?

A company is using an IaaS cloud to host a database server. The security team needs to ensure that the database is encrypted at rest. Who is responsible for implementing the encryption?

Keep studying — Cloud Security