hardMultiple ChoiceObjective-mapped
350-701 Practice Question: Refer to the exhibit
Exhibit
Refer to the exhibit. cisco-umbrella-cli> show summary Total DNS queries: 1500 Total blocked: 25 Total allowed: 1475
Refer to the exhibit. Enter the command output from a Cisco Umbrella deployment. An administrator observes that 25 DNS queries were blocked. What does this indicate?
⚠ Common exam trap
Candidates often confuse 'blocked' with 'failed to resolve' due to network issues (like timeouts or internal DNS failures), but Cisco specifically tests that Umbrella's block count is a deliberate policy enforcement action, not a connectivity or resolution error.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Policy enforcement blocking malicious or unwanted domains
The command output from a Cisco Umbrella deployment shows that 25 DNS queries were blocked. In Umbrella, DNS queries are blocked due to policy enforcement, typically when the domain being queried matches a security category (e.g., malware, phishing, command-and-control) or a custom block list. This indicates that Umbrella's cloud-delivered security policy actively prevented resolution of those 25 domains, protecting the network from malicious or unwanted content.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Successful DNS resolution for those queries
Why it's wrong here
Blocked queries are not resolved.
- ✗
Internal DNS resolution failures
Why it's wrong here
Umbrella blocks based on policy, not internal failures.
- ✗
Network congestion causing queries to timeout
Why it's wrong here
Blocked DNS queries are a security action, not a network issue.
- ✓
Policy enforcement blocking malicious or unwanted domains
Why this is correct
Umbrella's security policy blocks malicious domains, resulting in blocked queries.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-701 question from scratch — 978 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.