SDSI Practice Test 13 — 15 Questions

Question 1

When assessing the risk of 'Data Loss' via USB devices, which Cisco product provides the best control for endpoint-based DLP?

Accepted Answer

Cisco Secure Endpoint.. Cisco Secure Endpoint provides the device control and endpoint-level security required.

Answer

Cisco Stealthwatch.

Answer

Cisco ISE.

Answer

Cisco Umbrella.

Question 2

What is the benefit of using 'Identity-Based' microsegmentation in Cisco Secure Workload?

Accepted Answer

It provides stable policies that persist through workload moves and scaling. Identity-based segmentation uses metadata (like application name, service tier) which is permanent and logical, rather than transient attributes like IP addresses.

Answer

It requires less initial configuration

Answer

It relies on hard-coded firewall rules

Answer

It is only compatible with physical servers

Question 3

A SOC analyst requires a tool to gain visibility into encrypted traffic without full decryption. Which Cisco product feature should be included in the design to meet this requirement?

Accepted Answer

Cisco Encrypted Traffic Analytics (ETA).. Cisco Encrypted Traffic Analytics (ETA) on Cisco Catalyst switches/routers uses machine learning to identify threats in encrypted streams.

Answer

Cisco Firepower SSL decryption policies.

Answer

Cisco AnyConnect Network Visibility Module (NVM).

Answer

Cisco Identity Services Engine (ISE) Profiling.

Question 4

During a design review, it is determined that the current logging architecture is missing context for user identity. Which Cisco tool must be integrated with the firewall to map IP addresses to specific usernames in the logs?

Accepted Answer

Cisco Identity Services Engine (ISE).. Cisco ISE provides the identity context (IP to user mapping) that can be sent to firewalls via pxGrid or SXP.

Answer

Cisco Defense Orchestrator.

Answer

Cisco Umbrella.

Answer

Cisco SecureX.

Question 5

A security architect is configuring Cisco SecureX for the first time. Which is the most important step to enable centralized incident response?

Accepted Answer

Integrating product API credentials (e.g., Secure Endpoint, Umbrella).. Connecting the API credentials for all security tools to SecureX is the critical step for integration.

Answer

Setting the dashboard background color.

Answer

Manually uploading log files.

Answer

Renaming all the products in the dashboard.

Question 6

Which Cisco feature is used to ensure that only authorized devices can connect to the network?

Accepted Answer

Cisco ISE (802.1X).. 802.1X, managed by Cisco ISE, is the standard for device authorization.

Answer

Cisco Umbrella.

Answer

Cisco Firepower IPS.

Answer

Cisco Stealthwatch.

Question 7

What is the primary role of Cisco Secure Firewall in a network design?

Accepted Answer

To provide traffic inspection, filtering, and access control.. The firewall acts as the perimeter defense, providing traffic control and inspection.

Answer

To act as a core network switch.

Answer

To manage user credentials.

Answer

To provide internet access for all users.

Question 8

When designing a secure API environment, which THREE tasks should the API Gateway handle? (Choose THREE)

Accepted Answer

Authentication and authorization verification. The API gateway is responsible for securing the edge of the API architecture, including auth, rate limiting, and traffic routing.

Answer

Application data storage

Answer

Hard-coding all business logic

Question 9

When designing security for SaaS applications using Cisco Cloudlock, which TWO capabilities are key to mitigating data exfiltration risks? (Choose TWO)

Accepted Answer

Monitoring for anomalous user behavior and account takeovers.. Cloudlock provides data protection through content inspection (DLP) and anomaly detection based on user behavioral analytics.

Answer

Replacing all SaaS applications with on-premises alternatives.

Answer

Blocking all outbound Internet traffic from the office network.

Answer

Hard-coding user credentials into the Cloudlock dashboard.

Question 10

Following a successful breach, the design team needs to implement a 'Zero Trust' architecture. Which component is responsible for enforcing the policy decision made by the Policy Decision Point (PDP) in the Cisco Zero Trust framework?

Accepted Answer

Cisco Secure Firewall (as the PEP).. The Policy Enforcement Point (PEP) is the entity that blocks or permits traffic based on the decisions of the PDP.

Answer

Cisco Identity Services Engine (as the PEP).

Answer

Cisco SecureX (as the PEP).

Answer

Cisco Defense Orchestrator (as the PEP).

Question 11

Which document is essential for the SOC to standardize how they handle identified security incidents?

Accepted Answer

Incident Response Plan (IRP).. An Incident Response Plan (IRP) is the required document for standardizing response procedures.

Answer

Vulnerability Assessment Report.

Answer

Vendor Product Data Sheets.

Answer

Network Topology Map.

Question 12

Which THREE items should be included in a 'Security Design Requirements' document?

Accepted Answer

List of all potential threat actors and their motivations.. Design requirements must cover performance, threat vectors, and compliance standards.

Answer

The preferred color scheme for the SOC monitors.

Answer

The salary information of the security team.

Question 13

A design architect is selecting a tool to monitor the security of a hybrid cloud environment. Which Cisco tool provides visibility into both on-premises and cloud (AWS/Azure) traffic flows?

Accepted Answer

Cisco Secure Network Analytics.. Cisco Secure Network Analytics (Stealthwatch) supports both on-prem and cloud environments.

Answer

Cisco ISE.

Answer

Cisco Secure Email.

Answer

Cisco Secure Firewall.

Question 14

In a hybrid cloud environment, you need to extend security policies from your on-premises Cisco ACI fabric to your cloud-native workloads in AWS. Which component facilitates this policy consistency?

Accepted Answer

Cisco Cloud APIC. Cisco ACI Anywhere (specifically the Cisco Cloud ACI controller) allows the extension of the ACI policy model (EPGs and Contracts) into public cloud environments like AWS, ensuring consistent segmentation.

Answer

Cisco HyperFlex

Answer

null

Answer

Cisco Secure Firewall Virtual (formerly vFTD)

Answer

Cisco Nexus Dashboard

Question 15

A design requirement for a SOC environment is to have real-time visibility into who is on the network. Which Cisco tool is best for this?

Accepted Answer

Cisco Identity Services Engine (ISE).. Cisco ISE (Identity Services Engine) tracks all authentication and device connectivity events in real-time.

Answer

Cisco SecureX.

Answer

Cisco Umbrella.

Answer

Cisco Firepower Management Center.