mediumMultiple ChoiceObjective-mapped
350-701 Practice Question: A company uses Cisco Umbrella to enforce web…
A company uses Cisco Umbrella to enforce web security. After deploying a new policy that blocks all social media sites, users report that they cannot access a corporate Salesforce instance that uses a social login feature. Which Umbrella setting should be adjusted to resolve the issue without weakening the policy?
⚠ Common exam trap
Cisco often tests the distinction between content categories and application settings, where candidates mistakenly think disabling a category or using a bypass code is the correct approach, rather than using the granular allowed list for specific applications.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Add Salesforce to the Application Settings allowed list
The social login feature for Salesforce is being blocked by the Social Networking content category in Cisco Umbrella. By adding Salesforce to the Application Settings allowed list, you permit the specific application traffic while keeping the broader social media policy intact. This granular control ensures that only the required Salesforce instance bypasses the block, without weakening the overall security posture.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Create a bypass code for users to access Salesforce
Why it's wrong here
Bypass codes are temporary and not a scalable solution for a business application.
- ✗
Disable the Social Networking category under Content Categories
Why it's wrong here
This would remove the block entirely, not resolve the specific Salesforce issue.
- ✗
Configure Intelligent Proxy to inspect Salesforce traffic
Why it's wrong here
Intelligent Proxy is for visibility, not policy exceptions.
- ✓
Add Salesforce to the Application Settings allowed list
Why this is correct
This allows the Salesforce application even if the social networking category is blocked.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 978 original 350-701 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.