hardMultiple ChoiceObjective-mapped
350-701 Practice Question: During a cloud migration, the security team uses…
During a cloud migration, the security team uses Cisco CloudLock for DLP. They notice that the DLP engine is not scanning certain files in Google Drive shared with external users. The CloudLock admin console shows the connector status as 'connected'. What is the most likely cause?
⚠ Common exam trap
Cisco often tests the misconception that a 'connected' status implies full functionality, when in reality the connector may lack the necessary OAuth permissions to access certain file categories like externally shared items.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The connector lacks permission to scan external files
Cisco CloudLock requires explicit permissions to scan files shared with external users. Even though the connector status shows 'connected', the default OAuth scopes granted during initial setup may not include access to files shared outside the organization. The DLP engine can only inspect files it has read access to; without the 'drive.readonly' scope extended to externally shared items, those files are invisible to scanning.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The connector lacks permission to scan external files
Why this is correct
CloudLock requires specific OAuth scopes to access files shared outside the organization; if missing, scanning is incomplete.
- ✗
The files are too large (over 100 MB)
Why it's wrong here
CloudLock can scan large files; file size is not a limiting factor.
- ✗
The external sharing is disabled in CloudLock policy
Why it's wrong here
If policy disabled sharing, the files wouldn't be shared, but they are shared and not scanned.
- ✗
The files are in Google Drive 'My Drive' not 'Shared Drive'
Why it's wrong here
Both 'My Drive' and 'Shared Drive' are scanned by CloudLock.
Go deeper
Related to this question
About these practice questions
One of 978 original 350-701 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.