mediumMultiple ChoiceObjective-mapped
350-701 Practice Question: An enterprise uses multiple IaaS providers (AWS,…
An enterprise uses multiple IaaS providers (AWS, Azure, GCP). They need a single solution to enforce consistent security policies across all cloud environments. Which Cisco product provides multi-cloud security posture management?
⚠ Common exam trap
Cisco often tests the distinction between 'policy orchestration' (Defense Orchestrator) and 'posture management' (Secure Cloud Analytics), so the trap here is assuming that a firewall management tool can also perform multi-cloud security posture assessment without native cloud API integrations.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Cisco Secure Cloud Analytics
Cisco Secure Cloud Analytics (formerly Stealthwatch Cloud) is the correct answer because it provides multi-cloud security posture management by ingesting flow logs, API telemetry, and configuration data from AWS, Azure, and GCP to detect misconfigurations, anomalous behavior, and compliance violations. It uses machine learning to establish baselines and alert on deviations, enabling consistent policy enforcement across heterogeneous cloud environments without requiring agents or changes to existing infrastructure.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Cisco Defense Orchestrator
Why it's wrong here
CDO manages firewalls but does not monitor cloud workloads.
- ✓
Cisco Secure Cloud Analytics
Why this is correct
Provides multi-cloud monitoring and policy enforcement.
- ✗
Cisco ISE
Why it's wrong here
ISE is for NAC, not cloud security posture.
- ✗
Cisco Firepower NGFW
Why it's wrong here
Firepower is hardware or virtual firewall, not a cloud posture tool.
Go deeper
Related to this question
About these practice questions
This 350-701 question is part of Courseiva's 978-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.