A company with a hybrid identity environment uses both on-premises Active Directory and Azure AD. They want to synchronize users to Control Hub and ensure that changes in Active Directory propagate to Control Hub. Which solution should they use?

SCIM provisioning from Azure AD

A company uses Google Workspace as its identity provider and wants to automate user provisioning to Control Hub. They have enabled SCIM in Control Hub and generated a bearer token. What is the next step?

Configure the SCIM integration in Google Workspace using the Control Hub SCIM endpoint and token.

Create a custom role for SCIM administrators in Control Hub.

Install the directory connector on a local server.

Manually create all users in Control Hub before enabling SCIM.

An organization wants to ensure that only the IT security team can manage security settings in Control Hub, while other administrators can manage users and devices. How should they configure RBAC?

Assign the IT security team the Full Admin role and others the User Admin role.

Use the directory connector to sync the IT security team as a special group.

Create a custom role for security management and assign it only to the IT security team.

Use SCIM to assign security permissions to the IT security team.

Which of the following best describes how SCIM provisioning works in Control Hub?

Control Hub pulls user data from the identity provider using SCIM API calls

The identity provider periodically exports a CSV file that is manually uploaded to Control Hub

The identity provider sends SCIM API calls to Control Hub to create, update, or delete users

Control Hub uses LDAP queries to directly read user data from the identity provider's directory

Which of the following is a typical step in configuring the Control Hub directory connector?

Setting up a SAML SSO integration before the connector can sync users

Configuring a firewall rule to allow inbound connections from Control Hub

Downloading and installing the directory connector software on a server

Creating a new user account in Control Hub for every directory user

CiscoCertified Network Professional Collaboration

Domain 5Objective 8

5.8 Configure Cloud User Management (Control Hub Directory Connector, SCIM, and RBAC) 350-801 Practice Questions (Page 3)

Part of the Cloud and Hybrid Services domain, which accounts for 25% of the 350-801 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 1–2 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

7concepts

25%of the exam

Questions 11–15

11application · medium
A company with a hybrid identity environment uses both on-premises Active Directory and Azure AD. They want to synchronize users to Control Hub and ensure that changes in Active Directory propagate to Control Hub. Which solution should they use?
Select an answer first
12application · medium
A company uses Google Workspace as its identity provider and wants to automate user provisioning to Control Hub. They have enabled SCIM in Control Hub and generated a bearer token. What is the next step?
Select an answer first
13application · medium
An organization wants to ensure that only the IT security team can manage security settings in Control Hub, while other administrators can manage users and devices. How should they configure RBAC?
Select an answer first
14foundation · easy
Which of the following best describes how SCIM provisioning works in Control Hub?
Select an answer first
15foundation · easy
Which of the following is a typical step in configuring the Control Hub directory connector?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-801

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-801” is a trademark of its owner, used for identification only.