hardMultiple SelectObjective-mapped
350-701 Practice Question: A security administrator is configuring a Cisco…
A security administrator is configuring a Cisco CloudLock policy for a SaaS application. The policy must detect and alert on sharing of files containing personally identifiable information (PII) with external users. Which TWO actions should the administrator take? (Choose two.)
⚠ Common exam trap
Cisco often tests the distinction between detection/alerting and automated blocking, so candidates may mistakenly choose a blocking action (Option A) when the question explicitly asks for detection and alerting.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create a data loss prevention (DLP) rule with a PII pattern.
Cisco CloudLock uses DLP rules to scan files for sensitive content like PII patterns. Creating a DLP rule with a PII pattern enables the policy to identify files containing PII, which is the first step in detecting and alerting on such sharing events.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Configure a policy to automatically block all external sharing of files containing PII.
Why it's wrong here
Incorrect: This goes beyond alerting; it blocks sharing.
- ✗
Disable external sharing for the entire SaaS application.
Why it's wrong here
Incorrect: Too restrictive; only needs alerting.
- ✓
Create a data loss prevention (DLP) rule with a PII pattern.
Why this is correct
Correct: DLP rules identify sensitive content like PII.
- ✓
Create a policy that triggers an alert when a file with PII is shared externally.
Why this is correct
Correct: This meets the requirement to alert.
- ✗
Enable transparent proxy to inspect all traffic.
Why it's wrong here
Incorrect: CloudLock does not use transparent proxy for inspection.
Go deeper
Related to this question
About these practice questions
One of 978 original 350-701 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.