What does 'shadow IT' refer to in the context of CASB?

Malware that hides in cloud storage

Cloud applications used without IT approval

Encrypted traffic that bypasses firewalls

Unauthorized access to the network

What is a key capability of CASB policies for threat protection in cloud services?

Providing a VPN for remote access

Performing vulnerability scans of cloud infrastructure

Managing on-premises firewall rules

Detecting and blocking malware in cloud applications

What is a data control that CASB policies can enforce for cloud services?

Compressing data to save bandwidth

Preventing the upload of sensitive data to unsanctioned apps

Encrypting all data in transit using TLS

Replicating data across multiple regions

What is the purpose of a Data Loss Prevention (DLP) policy in Cisco Umbrella?

To identify and block sensitive data in web traffic

To provide antivirus scanning for downloads

To block all web traffic from unknown users

CCIE Security

Domain 5Objective 4

5.4 Cloud Security CCIE-SECURITY Practice Questions (Page 2)

Part of the 5.0 Advanced Threat Protection and Content Security domain, which accounts for 20% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 60 practice questions to prepare you well beyond it. (estimate)

60questions here

12free pages

10concepts

20%of the exam

Questions 6–10

6foundation · easy
What does 'shadow IT' refer to in the context of CASB?
Select an answer first
7foundation · easy
What is a key capability of CASB policies for threat protection in cloud services?
Select an answer first
8foundation · easy
What is a data control that CASB policies can enforce for cloud services?
Select an answer first
9foundation · easy
What is the purpose of a Data Loss Prevention (DLP) policy in Cisco Umbrella?
Select an answer first
10foundation · easy
Which type of data would a DLP policy typically be configured to detect?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.