Courseiva
Cloud SecurityhardMultiple ChoiceObjective-mapped

350-701 Cloud Security Posture Management (CSPM) Practice Question

A company wants to ensure that no cloud workload has a public IP address attached to a network security policy that allows inbound SSH from the entire internet. Which Cisco security product can continuously monitor and alert on such misconfigurations?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Cisco Secure Cloud Analytics

Cisco Secure Cloud Analytics (formerly Stealthwatch Cloud) is a cloud security posture management (CSPM) tool that continuously monitors cloud environments against security benchmarks and alerts on violations such as open SSH from the internet.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Cisco Umbrella

    Why it's wrong here

    Cisco Umbrella is a DNS-layer security solution, not designed for continuous cloud configuration monitoring.

  • Cisco Secure Cloud Analytics

    Why this is correct

    Cisco Secure Cloud Analytics provides CSPM capabilities to monitor and alert on misconfigurations such as open SSH to the internet.

  • Cisco Firepower Management Center

    Why it's wrong here

    Cisco ASA is a firewall appliance, not a cloud configuration monitoring service.

  • Cisco Identity Services Engine

    Why it's wrong here

    Cisco Firepower Management Center is used for managing firewall policies, not for automated cloud posture monitoring.

About these practice questions

This 350-701 question is part of Courseiva's 978-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.