mediumMultiple ChoiceObjective-mapped
350-701 Practice Question: Refer to the exhibit
Exhibit
Refer to the exhibit. Cisco Cloudlock Policy: Policy Name: Block High-Risk Apps Application: Any Action: Block Risk Level: High User: All Users Cloudlock Activity Log: User: [email protected] Application: Dropbox Action: Blocked Reason: Risk Level (High)
Refer to the exhibit. A user is unable to access Dropbox, which is a high-risk application. The administrator wants to allow Dropbox but still block other high-risk apps. What is the most efficient way to achieve this?
⚠ Common exam trap
Many candidates think modifying the risk level or using exemptions is the simplest approach, but Cisco tests the understanding that policy priority allows selective overrides without disrupting the original rule set.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create a new Cloudlock policy that allows Dropbox for all users, placed with higher priority
Cisco Cloudlock uses a policy-based approach where policies are evaluated in order of priority. By creating a new policy with higher priority that explicitly allows Dropbox, the administrator can override the existing block policy for that specific application while maintaining the block on all other high-risk apps. This is the most efficient method as it avoids modifying or deleting the original policy.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Add the user to a group that is exempt from the policy
Why it's wrong here
Would only allow for that user, not all users.
- ✗
Delete the existing policy and create separate policies for each high-risk app
Why it's wrong here
Inefficient and time-consuming.
- ✓
Create a new Cloudlock policy that allows Dropbox for all users, placed with higher priority
Why this is correct
Higher priority policy overrides the block.
- ✗
Modify the existing policy to change risk level to 'Medium'
Why it's wrong here
Changing risk level would allow all high-risk apps.
Go deeper
Related to this question
About these practice questions
This 350-701 question is part of Courseiva's 978-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.