20+ practice questions focused on Cloud Security — one of the most tested topics on the Cisco SCOR / CCNP Security Core 350-701 exam. Each question includes a detailed explanation so you learn why the right answer is correct.
Start Cloud Security PracticeA company is moving its on-premises applications to AWS EC2 instances. According to the shared responsibility model, which of the following is the customer's responsibility?
Explanation: In IaaS, the cloud provider manages the physical infrastructure (hosts, network, hypervisor), while the customer is responsible for securing the guest OS, applications, and data. Patching the OS is a customer responsibility.
An organization uses multiple SaaS applications and wants to enforce data loss prevention (DLP) policies to prevent sensitive data from being shared externally. Which cloud security solution should be deployed?
Explanation: A CASB provides visibility and control over SaaS applications, including DLP policies to detect and block unauthorized sharing of sensitive data. CSPM focuses on cloud infrastructure posture, CWPP on workloads, and WAF on web application attacks.
A security engineer is configuring Cisco Umbrella to enforce web security for remote users. The requirement is to block threats by intercepting DNS requests and only perform SSL decryption on specific high-risk categories. Which Umbrella feature should be used for selective SSL inspection?
Explanation: Cisco Umbrella's Intelligent Proxy can selectively proxy traffic (including SSL inspection) based on categories, URL groups, or other policies. The roaming client enables off-network protection but does not handle selective SSL inspection. SIG includes firewall and proxy but selective inspection is via Intelligent Proxy.
A company is deploying a multi-tier application in AWS. The web servers must be accessible from the internet, but the database servers should only be reachable from the web servers. Which AWS security controls should be used to enforce this?
Explanation: Security groups act as virtual firewalls for EC2 instances, and network ACLs provide subnet-level filtering. Security groups are stateful and can be used to allow traffic from web servers to database servers based on source security group. NACLs are stateless and less granular for this purpose.
An organization wants to implement zero trust principles for cloud access. Which of the following is a key component of a zero trust architecture in the cloud?
Explanation: Zero trust assumes no implicit trust and requires continuous verification. Identity is the new perimeter, and MFA is a core enforcement mechanism. VPNs create a trusted network model, which is contrary to zero trust. Perimeter firewalls are less relevant. Single password only is inadequate.
+15 more Cloud Security questions available
Practice all Cloud Security questions1. Baseline your knowledge
Start with 10 questions to gauge your current understanding of Cloud Security. This tells you whether you need a concept refresher or just practice.
2. Review every explanation
For each question — right or wrong — read the full explanation. Understanding why an answer is correct is more valuable than knowing the answer itself.
3. Focus on exam traps
Cloud Security questions on the 350-701 frequently use trap wording. Look for subtle differences in answers that test your precision, not just general knowledge.
4. Reach 80% consistently
Do repeated sessions until you score 80%+ three times in a row. Then move to mixed-mode practice to test cross-topic recall under realistic conditions.
The exact number varies per candidate. Cloud Security is tested as part of the Cisco SCOR / CCNP Security Core 350-701 blueprint. Practicing with targeted Cloud Security questions ensures you can handle any format or difficulty that appears.
Yes. Courseiva provides free 350-701 practice questions across all exam topics and domains. The platform includes topic-based practice, mock exams, missed-question review, bookmarked questions, and readiness tracking — no account required.
Difficulty is subjective, but Cloud Security is a high-priority exam concept tested in multiple ways — direct recall, scenario analysis, and command-output interpretation. Consistent practice is the best way to build confidence.
Launch a full Cloud Security practice session with instant scoring and detailed explanations.
Start Cloud Security Practice →