5.4 Cloud Security CCIE-SECURITY Practice Questions (Page 12)

Questions 56–60

1. 56application · medium

   A company wants to protect its finance team from web-based threats by isolating their browsing sessions. They have Cisco Umbrella deployed and want to ensure that all web traffic from the finance team is routed through Remote Browser Isolation (RBI). What should the administrator configure?

   • AEnable RBI globally for all users in the Umbrella dashboard.
   • BCreate an RBI policy and apply it to the finance team's identity in Umbrella.
   • CInstall a browser plugin on finance team's devices to enable RBI.
   • DConfigure the VA to route all traffic to the RBI service.
   Reveal Solution Discussion Select an answer first
2. 57application · medium

   An administrator has applied an RBI policy to the sales team, but they are experiencing performance issues because some websites are being isolated unnecessarily. The administrator wants to allow certain trusted websites to be accessed directly while still isolating high-risk categories. What should the administrator do?

   • ACreate a separate RBI policy for each website category.
   • BDisable RBI for the sales team and rely on DNS filtering only.
   • CIncrease the isolation level for all websites to improve security.
   • DAdd the trusted websites to an allow list in the RBI policy settings.
   Reveal Solution Discussion Select an answer first
4. 58application · medium

   A company wants to control access to cloud applications and detect shadow IT usage. They have Cisco Umbrella deployed and want to use CASB capabilities. What should the administrator configure to achieve this?

   • ACreate CASB policies in Umbrella to control access to cloud applications and monitor usage.
   • BUse DNS policies to block cloud applications.
   • CEnable RBI for all cloud applications.
   • DConfigure the VA to block all cloud applications.
   Reveal Solution Discussion Select an answer first
5. 59application · medium

   An organization has sanctioned Office 365 for business use, but employees are also using unsanctioned file-sharing services. The security team wants to enforce threat protection and data loss prevention for both sanctioned and unsanctioned cloud services. What should the administrator configure?

   • ACreate CASB policies that apply threat protection and DLP controls to both sanctioned and unsanctioned services.
   • BBlock all unsanctioned services using DNS policies.
   • CUse DLP policies only for sanctioned services.
   • DEnable RBI for all cloud services to prevent data loss.
   Reveal Solution Discussion Select an answer first
6. 60application · medium

   A company needs to prevent sensitive data, such as credit card numbers, from being uploaded to web applications. They have Cisco Umbrella deployed and want to use DLP capabilities. What should the administrator configure?

   • AUse CASB policies to block all web applications.
   • BEnable RBI for all web applications to prevent data uploads.
   • CDefine a DLP policy in Umbrella that identifies and blocks credit card numbers in web traffic.
   • DConfigure the VA to block uploads to web applications.
   Reveal Solution Discussion Select an answer first