A company has a team of support agents who need to manage user accounts in Control Hub but should not be able to change organization-wide settings or billing information. They also need to assign licenses to users. Which approach should an administrator take?

Assign the support agents the built-in Full Admin role.

Create a custom role with permissions for user management and license assignment, then assign it to the support agents.

Use the directory connector to assign the support agents a special group.

Enable SCIM provisioning and let the identity provider manage permissions.

A company is planning to migrate from manual user management in Control Hub to automated provisioning. They have both on-premises Active Directory and cloud-based Azure AD. What is the best practice for managing user lifecycles?

Use manual CSV import for all users and update them manually.

Use SCIM from Azure AD as the single provisioning method, with Azure AD Connect syncing on-premises AD to Azure AD.

Use the directory connector to sync from on-premises AD and SCIM from Azure AD simultaneously.

Use the directory connector only, ignoring Azure AD.

What is the primary benefit of using SCIM for user provisioning in Control Hub?

It automates the creation, update, and deletion of user accounts

It provides a graphical interface for manually creating users

It allows users to self-register for Control Hub accounts

It encrypts all user data stored in Control Hub

A company uses SCIM provisioning from Azure AD to Control Hub. They have a group of external contractors who should have limited access to Webex and should be automatically deprovisioned after 90 days. How can they achieve this with SCIM?

Create a separate SCIM integration for contractors with a custom attribute for expiration date.

Manually deprovision contractors after 90 days.

Use Azure AD to assign contractors to a specific group and configure SCIM to provision only that group, then use Azure AD's expiration policy to disable the accounts after 90 days.

Use the directory connector to sync contractors and set an expiration attribute.

An organization has multiple Active Directory domains and wants to synchronize users from all domains to Control Hub. They have installed the directory connector and configured it to connect to one domain. What is the best way to include users from the other domains?

Install a separate directory connector instance for each domain.

Configure the directory connector to use a global catalog that includes all domains.

Use SCIM provisioning from each domain's identity provider.

Manually create users from the other domains in Control Hub.

CiscoCertified Network Professional Collaboration

Domain 5Objective 8

5.8 Configure Cloud User Management (Control Hub Directory Connector, SCIM, and RBAC) 350-801 Practice Questions (Page 4)

Part of the Cloud and Hybrid Services domain, which accounts for 25% of the 350-801 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 1–2 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

7concepts

25%of the exam

Questions 16–20

16application · medium
A company has a team of support agents who need to manage user accounts in Control Hub but should not be able to change organization-wide settings or billing information. They also need to assign licenses to users. Which approach should an administrator take?
Select an answer first
17application · medium
A company is planning to migrate from manual user management in Control Hub to automated provisioning. They have both on-premises Active Directory and cloud-based Azure AD. What is the best practice for managing user lifecycles?
Select an answer first
18foundation · easy
What is the primary benefit of using SCIM for user provisioning in Control Hub?
Select an answer first
19expert · hard
A company uses SCIM provisioning from Azure AD to Control Hub. They have a group of external contractors who should have limited access to Webex and should be automatically deprovisioned after 90 days. How can they achieve this with SCIM?
Select an answer first
20expert · hard
An organization has multiple Active Directory domains and wants to synchronize users from all domains to Control Hub. They have installed the directory connector and configured it to connect to one domain. What is the best way to include users from the other domains?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-801

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-801” is a trademark of its owner, used for identification only.