SDSI Practice Test 10 — 10 Questions

Question 1

Which risk assessment technique involves evaluating the impact of an attack on the confidentiality, integrity, and availability of an asset?

Accepted Answer

CIA Triad Impact Assessment.. CIA Triad assessment is a standard risk evaluation methodology.

Answer

SWOT Analysis.

Answer

Network Penetration Testing.

Answer

Cost-Benefit Analysis.

Question 2

Which TWO Cisco products are used to achieve 'Zero Trust' for remote users?

Accepted Answer

Cisco Identity Services Engine (ISE).. Zero Trust remote access requires secure connectivity and strict identity verification.

Answer

Cisco Umbrella.

Answer

Cisco Stealthwatch.

Answer

Cisco Secure Email.

Question 3

Which THREE steps are required for a successful security design process?

Accepted Answer

Developing a detailed architectural plan and implementation roadmap.. Successful designs require assessment, planning, and validation.

Answer

Ignoring all existing network infrastructure.

Answer

Purchasing the most expensive hardware available.

Question 4

Which design principle should be followed when implementing micro-segmentation in a data center?

Accepted Answer

Implement identity-based segmentation at the workload level.. Identity-based segmentation provides the most granular control at the workload level.

Answer

Segment based only on IP addresses.

Answer

Disable all firewalls for maximum performance.

Answer

Keep all servers in the same VLAN for simplicity.

Question 5

Which design component is essential for securing traffic in a cloud-native environment using Cisco Secure Workload without relying on physical network appliances?

Accepted Answer

Workload-level security agents. The Secure Workload agent is the software component that resides on the workload and enforces policy without needing physical appliances.

Answer

Physical tap aggregation

Answer

VLAN-based segmentation

Answer

Direct Connect integration

Question 6

Which THREE capabilities are provided by Cisco Cloudlock to enhance SaaS security posture? (Choose THREE)

Accepted Answer

Data Loss Prevention (DLP) for SaaS data. Cloudlock provides visibility, data protection (DLP), and threat protection for users and applications.

Answer

Real-time packet capture on the local network

Answer

Hardening of physical server BIOS settings

Question 7

A client is deploying a serverless application on AWS and needs to secure the API interactions with Cisco Umbrella. Which design pattern effectively protects the API endpoints from malicious exfiltration without introducing significant latency?

Accepted Answer

Use the Cisco Umbrella API or DNS-layer security to enforce request filtering at the outbound proxy level.. Integrating Cisco Umbrella with serverless architectures often involves using the Umbrella API or DNS-layer security to block requests to malicious domains, which is ideal for serverless environments where traditional inline appliances cannot be placed.

Answer

Route all serverless traffic through an on-premises Cisco Firepower appliance.

Answer

Configure an inline Cisco ASA virtual instance to inspect all API traffic.

Answer

null

Answer

Implement the Cisco Umbrella DNS forwarder within the serverless function environment.

Question 8

When designing for microsegmentation using Cisco Secure Workload, what is the significance of 'Flow Visibility'?

Accepted Answer

It allows for the modeling and validation of security policies before enforcement. Visibility is the prerequisite for building accurate policies. You must understand what is communicating before you can safely restrict it.

Answer

It automates the patching of vulnerabilities

Answer

It is used to bill users for bandwidth usage

Answer

It is used to identify the physical location of servers

Question 9

Which THREE actions are essential for maintaining a secure SaaS posture using Cloudlock? (Choose THREE)

Accepted Answer

Monitor for anomalous user behavior (UEBA). Security requires constant vigilance through DLP policies, managing third-party app risk, and monitoring for user behavioral anomalies.

Answer

Disable all public internet access

Answer

Update all enterprise server drivers

Question 10

When designing for multi-cloud, why is an orchestration layer for security policy so important?

Accepted Answer

To ensure consistent policy enforcement across heterogeneous environments. Each cloud provider has different security constructs (e.g., AWS Security Groups vs Azure NSGs). An orchestration layer abstracts this, allowing for a single policy to be applied consistently across all providers.

Answer

To increase the performance of the cross-cloud traffic

Answer

To reduce the cost of the cloud service

Answer

To eliminate the need for cloud-native firewalls