easyMultiple ChoiceObjective-mapped
350-701 Practice Question: A DevOps team is deploying containerized…
A DevOps team is deploying containerized applications on Kubernetes and needs to ensure that only authorized images are run. Which solution should they integrate with Kubernetes to enforce image trust and scanning?
⚠ Common exam trap
Cisco often tests the distinction between network security tools (Stealthwatch, Firepower, Umbrella) and workload-specific security solutions (CWP), leading candidates to pick a familiar name like Firepower or Umbrella instead of the correct container-focused product.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Cisco Cloud Workload Protection (CWP)
Cisco Cloud Workload Protection (CWP) is the correct solution because it provides integrated image scanning, vulnerability assessment, and trust enforcement for containerized workloads in Kubernetes. CWP uses a policy-based admission controller to block deployments of unauthorized or vulnerable images before they run, directly addressing the requirement to ensure only authorized images are executed.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Cisco Stealthwatch Cloud
Why it's wrong here
Stealthwatch monitors network flows, not container images.
- ✓
Cisco Cloud Workload Protection (CWP)
Why this is correct
CWP provides image scanning and admission control for containers.
- ✗
Cisco Firepower Next-Generation Firewall
Why it's wrong here
Firepower is network firewall, not container security.
- ✗
Cisco Umbrella
Why it's wrong here
Umbrella does not integrate with Kubernetes for image security.
Go deeper
Related to this question
About these practice questions
This 350-701 question is part of Courseiva's 978-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.