You have configured a DLP policy in Cisco Cloudlock that flags files shared with external users. You notice files shared with 'Anyone with the link' are not being flagged. What is the most likely configuration error?
You are implementing Cisco Umbrella CASB to restrict file uploads to unsanctioned SaaS applications. You have configured an App Control rule, but users can still upload files to a cloud storage service. What is the most likely cause?
You are investigating a data leak in Google Drive using Cisco Cloudlock. You notice that a user shared a folder with the 'public'. How can you verify exactly who accessed this folder?
You need to ensure that only corporate-managed devices can access Microsoft 365. Which component should be configured to verify the device's security posture before granting access?
A security administrator needs to prevent users from downloading corporate files to personal devices using Cisco Cloudlock. Which policy type must be implemented to achieve this session-level control?
You are configuring a DLP policy in Cisco Cloudlock. Which setting allows the policy to ignore files that have been cryptographically signed by your organization's internal CA?
To ensure compliance, you must ensure that all emails containing credit card numbers sent via O365 are encrypted. How is this achieved within the Cloudlock framework?
A security team wants to block uploads of files containing personally identifiable information (PII) to any unsanctioned cloud storage service while still allowing uploads to approved services. They have deployed Cisco Cloudlock and Cisco Umbrella. Which configuration should they implement to achieve this?
A financial institution uses Cisco Cloudlock to protect data in Microsoft 365. They need to ensure that when a user shares a file containing credit card numbers with an external domain, the file is automatically quarantined and the user is notified. Which Cloudlock policy action should be configured?
A security administrator is configuring Cisco Cloudlock to monitor data in a custom application that does not have a native API connector. The application supports OAuth 2.0 and exposes a REST API for file operations. What is the most appropriate way to integrate this application with Cloudlock?
A security engineer is deploying Cisco Cloudlock to protect data in Google Workspace. They need to ensure that files shared with external users are continuously monitored and that any file containing sensitive data is automatically restricted if it becomes publicly accessible. Which two Cloudlock features should be configured to meet these requirements? (Choose two.)
Which component of Cisco's secure cloud access architecture is responsible for performing URL filtering and malware scanning on traffic destined for SaaS applications?
When configuring Cisco Duo for SaaS application access, which THREE conditions can be used in a 'Policy' to restrict access to a sensitive application?
You are configuring a Cisco Cloudlock policy to detect sensitive data in a Salesforce environment. You need to identify instances where credit card numbers are shared publicly. Which specific policy category should you configure?
A user is attempting to upload a file to a SaaS application, but the Cisco Umbrella Intelligent Proxy blocks it. What is the most effective way to troubleshoot the block?
You are utilizing Cisco Umbrella to block access to unsanctioned SaaS apps. You want to allow access to O365 but restrict users to only your corporate tenant. Which feature should you enable?
You are configuring a Cisco Cloudlock policy to detect sensitive PII in a Salesforce instance. Which configuration step ensures that the policy specifically triggers when sensitive data is uploaded to a public-facing object?
When integrating Cisco Cloudlock with O365, which authentication mechanism is required to allow the CASB to perform administrative actions, such as removing a malicious file share?
An administrator notices that sensitive data is being shared via Microsoft Teams. Where in the Cloudlock dashboard should they navigate to identify which specific users are sharing the files?
In a Cisco Secure Access environment, you are applying an application-layer policy to restrict access to a specific SaaS application based on the user's geolocation. Which tool is used to define this access control rule?
You have detected a compromised account in Google Workspace via Cloudlock. Which automated response action can immediately prevent further data exfiltration from this user account?
A security team is using Cisco Cloudlock to protect data in a sanctioned Microsoft 365 tenant. They need to automatically apply a sensitivity label to files that match a custom regular expression for project code names, without blocking user activity. Which Cloudlock policy action should they configure?
A security architect is designing data loss prevention for a hybrid workforce using Cisco Cloudlock and Cisco Umbrella. They need to inspect encrypted traffic to a sanctioned cloud app to detect sensitive data uploads, while maintaining privacy for personal banking sites. Which combination of capabilities should they implement?
A company wants to use Cisco Cloudlock to protect data in a sanctioned cloud application. The security team needs to understand what type of data Cloudlock can inspect for policy violations. Which statement accurately describes Cloudlock's data inspection capability?