What is the primary purpose of deploying the Cisco Umbrella virtual appliance in a network?

To encrypt all network traffic using IPsec VPN

To replace the firewall with advanced threat prevention

To provide a local web proxy for content filtering

To forward DNS traffic from the network to Umbrella for security enforcement

In Cisco Umbrella, what does an RBI policy control?

Which websites are accessed in an isolated browser

Which DNS servers are used for resolution

Which email attachments are scanned

What is a typical setting that can be adjusted when tuning an RBI policy?

The level of isolation (e.g., full isolation vs. safe browsing)

The encryption algorithm for VPN

What is the primary function of a Cloud Access Security Broker (CASB) policy in Cisco Umbrella?

To control access to cloud applications and detect shadow IT

To provide DDoS protection for cloud services

To encrypt data at rest in cloud storage

To manage virtual machine lifecycle

CCIE Security

Domain 5Objective 4

5.4 Cloud Security CCIE-SECURITY Practice Questions (Page 1)

Part of the 5.0 Advanced Threat Protection and Content Security domain, which accounts for 20% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 60 practice questions to prepare you well beyond it. (estimate)

60questions here

12free pages

10concepts

20%of the exam

Questions 1–5

1foundation · easy
What is the primary purpose of deploying the Cisco Umbrella virtual appliance in a network?
Select an answer first
2foundation · easy
In Cisco Umbrella, what does an RBI policy control?
Select an answer first
3foundation · easy
To whom can Remote Browser Isolation (RBI) policies be applied in Cisco Umbrella?
Select an answer first
4foundation · easy
What is a typical setting that can be adjusted when tuning an RBI policy?
Select an answer first
5foundation · easy
What is the primary function of a Cloud Access Security Broker (CASB) policy in Cisco Umbrella?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.