mediumMultiple ChoiceObjective-mapped
350-701 Uses Cisco Umbrella for DNS-layer security Practice Question
An organization uses Cisco Umbrella for DNS-layer security. They want to block access to a newly discovered malicious domain (malware.example.com) immediately. Which action should the administrator take in the Umbrella dashboard?
⚠ Common exam trap
Watch out — candidates often confuse the 'Global Block List' (which applies to IP addresses at the network layer) with the policy-specific 'Block List' (which applies to domains at the DNS layer), leading them to select Option A instead of C.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Add the domain to the 'Block List' under the policy's 'Destination Lists'.
In Cisco Umbrella, the most immediate way to block a specific malicious domain is to add it to the 'Block List' under the policy's 'Destination Lists'. This list is evaluated in real-time for DNS queries, allowing the administrator to enforce the block without waiting for threat intelligence updates or affecting other policies.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Add the domain to the 'Global Block List' under 'Managed Networks'.
Why it's wrong here
Global block list is for permanent blocks across all policies; adding to policy block list is immediate for that policy.
- ✗
Add the domain to the 'Temporary Block List' under 'Security Settings'.
Why it's wrong here
Temporary block list is typically for IP addresses, not domains.
- ✓
Add the domain to the 'Block List' under the policy's 'Destination Lists'.
Why this is correct
Policy block list immediately blocks DNS queries to the domain for users under that policy.
- ✗
Add the domain to the 'IP Layer Enforcement' list.
Why it's wrong here
IP Layer Enforcement blocks traffic based on IP addresses, not domain names.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-701 question from scratch — 978 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.