mediumMultiple ChoiceObjective-mapped
350-701 Uses Cisco Umbrella to secure remote users Practice Question
An organization uses Cisco Umbrella to secure remote users. The security team wants to ensure that all DNS queries from endpoints are forwarded to Umbrella even when users are off the corporate network. Which deployment method achieves this?
⚠ Common exam trap
Cisco often tests the distinction between network-level controls (proxy, BGP) and endpoint-level controls (roaming client), leading candidates to incorrectly choose a network-based solution for remote users who are not on the corporate network.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Deploy the Cisco Umbrella Roaming Client on endpoints
The Cisco Umbrella Roaming Client is specifically designed to enforce DNS security on endpoints regardless of their network location. It installs a local DNS forwarder that intercepts all DNS queries and sends them to Umbrella's cloud resolvers, ensuring protection even when users are off the corporate network. This method does not rely on network-level configurations that are ineffective for remote users.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Configure a network-based proxy
Why it's wrong here
Proxy is for HTTP, not DNS.
- ✗
Use a PAC file to redirect traffic
Why it's wrong here
PAC files are for web proxy, not DNS.
- ✗
Use BGP injection to advertise Umbrella IPs
Why it's wrong here
BGP injection is for network-level integration, not endpoints.
- ✓
Deploy the Cisco Umbrella Roaming Client on endpoints
Why this is correct
Roaming client ensures off-net DNS forwarding.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-701 question from scratch — 978 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.