These questions describe a network symptom and ask you to identify the root cause or the correct fix. They appear across all certification exams and reward systematic thinking over memorisation. The best candidates follow a consistent troubleshooting framework even under time pressure.
Start Scenario PracticeYou are troubleshooting a scenario where users are unable to access a specific internal cloud resource after migrating to Cisco Secure Access. The traffic is being blocked by a default policy. How should you modify the traffic flow to ensure internal traffic stays off the SIG?
Explanation: Tunnel Exclusions in Cisco Secure Access allow administrators to define internal IP ranges (and domains) that should bypass the SIG tunnel entirely, so traffic to those destinations is routed natively rather than being inspected and blocked by the default policy. This is the correct way to keep internal/private traffic off the Secure Access cloud when users are remote or on-network. Configuring the exclusion ensures the internal resource is reachable without being subjected to cloud web filtering.
When troubleshooting DNS queries in Umbrella, which command is most useful on a local machine to see if it is using the Umbrella resolvers?
Explanation: Running 'nslookup debug.opendns.com' confirms if the query is being answered by the Umbrella infrastructure.
A user is experiencing 'Access Denied' when trying to access a cloud resource. You are using the SecureX 'Pivot' menu to investigate. What are you looking for in the logs?
Explanation: When a user gets 'Access Denied' on a cloud resource, the relevant evidence is the policy enforcement decision — a log entry showing a 'Deny' action from the policy engine (e.g., a cloud security policy, conditional access, or firewall rule). Using SecureX Pivot, you correlate the user, resource, and timestamp to find that deny event, which tells you which policy blocked access and why. This is the direct causal evidence for the denial.
When troubleshooting a Cisco Umbrella roaming client visibility issue, what does the 'Diagnostic Tool' verify?
Explanation: The Umbrella Roaming Client Diagnostic Tool checks connectivity to the Umbrella resolvers and verifies that the client is successfully syncing policy and identity information from the Umbrella dashboard. It reports on DNS resolution path, tunnel status, and whether the client is registered and communicating with the Umbrella service. This directly addresses visibility issues where the client is installed but not enforcing or reporting.
You are troubleshooting a missing event in Cisco Secure Cloud Analytics (formerly Stealthwatch Cloud). Which configuration should you verify to ensure the cloud gateway is successfully pushing traffic metadata?
Explanation: Cisco Secure Cloud Analytics (Stealthwatch Cloud) ingests traffic metadata from cloud environments via VPC Flow Logs (in AWS) or equivalent flow logs in other clouds. If VPC Flow Logs are not enabled, the cloud gateway cannot collect and push metadata, resulting in missing events. Therefore, verifying VPC Flow Logs enablement is the correct configuration check.
+10 more scenario questions available
Practice all Troubleshooting Scenario QuestionsThese questions describe a network symptom and ask you to identify the root cause or the correct fix. They appear across all certification exams and reward systematic thinking over memorisation. The best candidates follow a consistent troubleshooting framework even under time pressure. These appear throughout the SCAZT and require you to apply your knowledge, not just recall facts.
Cisco doesn't publish an exact breakdown, but scenario-based questions (especially exhibit and command-output formats) make up a significant portion of the SCAZT. Practicing each scenario type ensures you're ready for any format.
Yes. Courseiva provides free SCAZT scenario practice across all official exam domains. The platform includes scenario-based questions, command-output interpretation, topic-based practice, mock exams, and readiness tracking — no account required.
Launch a full Troubleshooting Scenario Questions session with instant scoring and detailed explanations.
Start Scenario Practice →