350-701 Cloud Security Practice Question
An organization uses Cisco Umbrella's Secure Internet Gateway (SIG). Which of the following sets of capabilities is typically included in a SIG solution?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Cloud-delivered firewall and web proxy
The correct answer is D, which lists two core capabilities of a Secure Internet Gateway (SIG): cloud-delivered firewall and web proxy. Options A, B, and C are incorrect because A (IPS) is often a separate security function, B (DLP for data at rest) is not typically part of a SIG (DLP for data in motion may be included), and C (DNS-layer security only) is a subset but not the full SIG capability.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Intrusion prevention system (IPS)
Why it's wrong here
Incorrect. IPS is not a typical SIG capability; SIG focuses on secure web gateway functions like URL filtering, threat intelligence, and cloud-delivered firewall.
- ✗
DLP for data at rest
Why it's wrong here
Incorrect. DLP for data at rest is not a standard SIG feature; SIG may include DLP for data in motion but not at rest.
- ✗
DNS-layer security only
Why it's wrong here
Incorrect. SIG includes more than just DNS-layer security; it also includes web proxy, firewall, and threat intelligence.
- ✓
Cloud-delivered firewall and web proxy
Why this is correct
Correct. A Secure Internet Gateway typically includes cloud-delivered firewall and web proxy as core capabilities to secure internet traffic.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-701 question from scratch — 978 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.