hardMultiple SelectObjective-mapped
350-701 Practice Question: Which THREE components are part of a Cisco Cloud…
Which THREE components are part of a Cisco Cloud Web Security (CWS) deployment with on-premises connectors? (Choose three.)
⚠ Common exam trap
Cisco often tests the distinction between the On-premises Connector appliance and the Cisco Web Security Appliance (WSA), as candidates may confuse the cloud-based CWS connector with the fully on-premises WSA solution.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
On-premises Connector appliance
The On-premises Connector appliance (option B) is a core component of a Cisco CWS deployment with on-premises connectors. It acts as a local proxy that forwards web traffic from users to the Cisco Cloud Scanning Center for threat inspection, while also caching content locally to reduce latency. This appliance integrates with existing network infrastructure to enable cloud-based web security without requiring full traffic redirection to the cloud.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Cisco ASA firewall as the forward proxy
Why it's wrong here
An ASA is not mandatory; any device that can redirect traffic to the connector works.
- ✓
On-premises Connector appliance
Why this is correct
The Connector sends traffic to the cloud scanning center.
- ✓
Cloud-based policy management portal
Why this is correct
Policies are centrally managed via a web interface.
- ✗
Cisco Web Security Appliance (WSA)
Why it's wrong here
WSA is an on-premises web proxy, not part of the CWS cloud.
- ✓
Cisco Cloud Scanning Center
Why this is correct
This is where security filtering occurs in the cloud.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-701 question from scratch — 978 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.