Courseiva
Cloud SecuritymediumMultiple ChoiceObjective-mapped

350-701 Cloud Security Practice Question

A company uses Cisco Umbrella to provide DNS-layer security. An employee tries to visit a website that is hosting malware, but the domain is not yet categorized. How does Umbrella handle this request?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

The request is blocked if the domain is identified as malicious by Umbrella's threat intelligence

Umbrella's DNS-layer security can block domains based on intelligence feeds, including newly observed malicious domains. It does not need categorization; it uses real-time threat intelligence. The intelligent proxy is separate.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • The request is redirected to a captive portal for user awareness

    Why it's wrong here

    Umbrella can block without redirection.

  • The request is allowed because the domain is not categorized

    Why it's wrong here

    Umbrella can block based on threat intelligence even without categorization.

  • The request is blocked if the domain is identified as malicious by Umbrella's threat intelligence

    Why this is correct

    Umbrella uses threat intelligence to block malicious domains regardless of category.

  • The request is proxied through the intelligent proxy for inspection

    Why it's wrong here

    Intelligent proxy is for selective HTTPS inspection, not initial DNS blocking.

About these practice questions

This 350-701 question is part of Courseiva's 978-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.