mediumMultiple ChoiceObjective-mapped
350-701 Practice Question: Is designing a multi-cloud architecture with AWS…
A network engineer is designing a multi-cloud architecture with AWS and Azure. The company needs consistent security policies across both cloud providers and on-premises data centers. Which Cisco solution should the engineer recommend?
⚠ Common exam trap
Cisco often tests the distinction between visibility-only tools (Stealthwatch) and enforcement-capable platforms (Tetration), leading candidates to choose Stealthwatch because they associate it with 'security analytics' without realizing the question explicitly requires 'consistent security policies' across clouds.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Cisco Tetration.
Cisco Tetration is the correct recommendation because it provides a multi-cloud workload protection platform that enforces consistent security policies across AWS, Azure, and on-premises environments using a software-based agent and a centralized policy engine. It leverages micro-segmentation and behavioral analytics to automatically generate and enforce whitelist-based policies based on actual traffic flows, ensuring uniform security regardless of the underlying cloud provider.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Cisco Umbrella SIG.
Why it's wrong here
Incorrect: Umbrella is for DNS-layer and web security, not workload segmentation.
- ✗
Cisco Firepower NGFW.
Why it's wrong here
Incorrect: Firepower is mainly for on-premises network firewall, not multi-cloud policy management.
- ✓
Cisco Tetration.
Why this is correct
Correct: Tetration provides micro-segmentation and consistent policies across hybrid/multi-cloud.
- ✗
Cisco Stealthwatch Enterprise.
Why it's wrong here
Incorrect: Stealthwatch offers visibility but not enforcement of security policies across clouds.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-701 question from scratch — 978 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.