Application And Data Security

Which component of Cisco's secure cloud access architecture is responsible for performing URL filtering and malware scanning on traffic destined for SaaS applications?

When configuring Cisco Duo for SaaS application access, which THREE conditions can be used in a 'Policy' to restrict access to a sensitive application?

In Cisco Umbrella, what is the primary purpose of defining a 'Cloud Application' in the 'App Discovery' dashboard?

You are auditing a Cisco Cloudlock deployment for O365. Which TWO methods can be used to remediate a file that violates a Data Loss Prevention policy?

Which Cisco technology provides visibility and control over SaaS applications using API-based integration to inspect data at rest?

You are configuring a Cisco Cloudlock policy to detect sensitive data in a Salesforce environment. You need to identify instances where credit card numbers are shared publicly. Which specific policy category should you configure?

When integrating Cisco Umbrella with a SaaS application, which TWO methods can be used to ensure secure user authentication?

A user is attempting to upload a file to a SaaS application, but the Cisco Umbrella Intelligent Proxy blocks it. What is the most effective way to troubleshoot the block?

Which THREE criteria can be used to classify a 'Shadow IT' application in Cisco Umbrella?

Which THREE data types are commonly supported by the Cisco Cloudlock DLP engine for pattern matching?

Which feature in Cisco Cloudlock allows administrators to view a dashboard of users who are behaving outside of their normal baseline?

When configuring an OAuth policy in Cisco Cloudlock, which TWO actions can be taken against third-party applications granted access to user data?

Which Cisco Cloudlock policy type should be used to detect when a user logs in from an unusual geographic location?

What is the primary function of the 'CASB' category in Cisco Umbrella's web policy?

Which THREE items are included in a Cisco Cloudlock 'Incident' report?

Which TWO settings should be verified if a Cisco Cloudlock API connector to Google Workspace is showing a 'Warning' status?

Which term describes the unauthorized use of cloud applications by employees within an organization?

When creating a policy in Cisco Cloudlock, what is the significance of setting a 'Threshold'?

You are utilizing Cisco Umbrella to block access to unsanctioned SaaS apps. You want to allow access to O365 but restrict users to only your corporate tenant. Which feature should you enable?

Which THREE types of information are typically displayed in the Cisco Umbrella 'App Discovery' report?

What is the primary role of a Cloud Access Security Broker (CASB)?

Which TWO methods can Cisco Cloudlock use to notify an administrator of a policy violation?

In Cisco Cloudlock, why would you use a 'Custom Regex' pattern in a DLP policy?

When configuring Cisco Umbrella for SaaS, how does SSL inspection impact the visibility of application traffic?

Which TWO actions can a user take if a file is quarantined by Cisco Cloudlock?

What is the primary benefit of deploying a 'Managed' SaaS application configuration in Cisco Umbrella?

You notice an employee is accessing a cloud app that is not approved by IT. Which Umbrella feature allows you to see this activity?

If you configure an API-based connector for a new SaaS app in Cisco Cloudlock, when does the initial scan typically begin?

In Cisco Cloudlock, what is the purpose of an 'Incident'?

Which THREE actions can be performed by the Cisco Cloudlock UBA engine?

When configuring a Duo authentication policy for a SaaS app, which THREE device health indicators can be required?

You are configuring a Cisco Cloudlock policy to detect sensitive PII in a Salesforce instance. Which configuration step ensures that the policy specifically triggers when sensitive data is uploaded to a public-facing object?

When integrating Cisco Cloudlock with O365, which authentication mechanism is required to allow the CASB to perform administrative actions, such as removing a malicious file share?

An administrator notices that sensitive data is being shared via Microsoft Teams. Where in the Cloudlock dashboard should they navigate to identify which specific users are sharing the files?

In a Cisco Secure Access environment, you are applying an application-layer policy to restrict access to a specific SaaS application based on the user's geolocation. Which tool is used to define this access control rule?

You have detected a compromised account in Google Workspace via Cloudlock. Which automated response action can immediately prevent further data exfiltration from this user account?

An administrator needs to ensure that only managed devices can access sensitive data in Box. Which Cisco solution feature enables this verification?

Which THREE of the following are primary functions of a Cloud Access Security Broker (CASB) regarding application and data security?

When setting up a DLP policy for cloud storage, which TWO elements should be defined to ensure accurate classification of sensitive data?

Which THREE mechanisms are commonly used by a CASB to enforce access control to SaaS applications?

Which TWO factors are critical when configuring an automated remediation workflow in Cisco Cloudlock to prevent data loss?

A security team is using Cisco Cloudlock to protect data in a sanctioned Microsoft 365 tenant. They need to automatically apply a sensitivity label to files that match a custom regular expression for project code names, without blocking user activity. Which Cloudlock policy action should they configure?

A security architect is designing data loss prevention for a hybrid workforce using Cisco Cloudlock and Cisco Umbrella. They need to inspect encrypted traffic to a sanctioned cloud app to detect sensitive data uploads, while maintaining privacy for personal banking sites. Which combination of capabilities should they implement?

A company wants to use Cisco Cloudlock to protect data in a sanctioned cloud application. The security team needs to understand what type of data Cloudlock can inspect for policy violations. Which statement accurately describes Cloudlock's data inspection capability?