Cloud Security Architecture

Which TWO capabilities does Cisco Cloudlock bring to a SaaS environment?

You are configuring a SASE design to secure traffic from a branch office to the cloud. What is the recommended method for routing internet-bound traffic from the branch to the Cisco Umbrella SIG?

Which THREE features are provided by the Cisco Umbrella 'Intelligent Proxy'?

When implementing a Zero Trust architecture, what is the 'Principle of Least Privilege' (PoLP) specifically intended to achieve?

In a SASE deployment, why is the integration between Cisco ISE and Cisco Secure Access considered a critical design pattern?

Which THREE criteria are used by Cisco Secure Access to determine if a connection should be allowed?

Which feature of the Cisco Umbrella SIG is specifically designed to prevent 'Command and Control' (C2) callbacks from infected endpoints?

Which of the following is a key component of a successful 'Identity and Access Management' (IAM) strategy in the cloud?

In a SASE deployment using Cisco SD-WAN and Umbrella, how is traffic steered to the cloud security stack when a branch router loses its direct tunnel connection to the Umbrella SIG headend?

Which TWO identity sources can be integrated with Cisco Duo for user authentication?

Which TWO methods can be used to tunnel traffic from a branch office to the Cisco Umbrella SIG?

When deploying a secure remote access solution, how do you handle 'Split Tunneling' safely in a Zero Trust environment?

A network architect is deploying Cisco Umbrella SIG to enforce Zero Trust access. Which mechanism provides the initial posture assessment before allowing a user to access a SaaS application via the Secure Web Gateway?

A firm is adopting SASE and needs to secure mobile devices. Which component of the Cisco SASE suite is best suited to protect mobile endpoints?

You are designing a secure hybrid cloud environment and need to ensure that traffic between the public cloud and private data center is inspected. Which architecture pattern is most effective?

Which TWO components are essential for implementing a Zero Trust Network Access (ZTNA) model using Cisco Duo and Secure Access?

When designing a Secure Access Service Edge (SASE) architecture, which principle best describes the shift from traditional hub-and-spoke networking?

When evaluating cloud security reference architectures, what is the primary purpose of a 'Cloud Access Security Broker' (CASB)?

Which capability of the Cisco Umbrella SIG ensures that sensitive data, such as PII or credit card numbers, does not leave the organization via web traffic?

Which Cisco technology should be used to provide visibility and threat detection for traffic traversing between cloud workloads in a VPC?

When designing for high availability in a SASE architecture, which THREE strategies are recommended?

Which TWO of the following are primary components of the Cisco SASE security stack?

What is the primary benefit of using 'SAML' (Security Assertion Markup Language) for cloud application authentication?

A user is attempting to access a SaaS application, but the session is blocked by Cisco Cloudlock due to a detected policy violation. Which component is responsible for analyzing the API calls and triggering the remediation?

Which component of the Cisco SASE architecture provides the primary security enforcement point for remote users browsing the web from untrusted networks?

You are troubleshooting a connection issue where a remote user cannot access a private cloud application via the Cisco Secure Access ZTNA connector. Which step is most likely to resolve the issue?

Which TWO features of Cisco Umbrella assist in preventing data loss?

A user is using a managed laptop. How does 'Device Posture' in the Cisco SASE model verify that an antivirus solution is active?

Which THREE factors influence the performance of a SASE deployment?

Which Cisco product facilitates 'Cloud-to-Cloud' security by monitoring activities in SaaS platforms like Microsoft 365?

When designing a cloud security architecture, why is 'logging and observability' so critical?

An organization is deploying Cisco Umbrella SIG to enforce Zero Trust access. You must configure the selective decryption policy. Which setting ensures that specific sensitive traffic, such as financial and healthcare sites, is bypassed for inspection to comply with privacy regulations?

A global company needs to ensure that users in different regions have the lowest latency when accessing cloud applications. How should the SASE architecture be configured?

Which THREE factors are typically considered when evaluating 'Device Posture' in a Zero Trust environment?

Why is 'SSL/TLS Inspection' necessary in a SASE architecture?

Which THREE components are critical to consider when designing a 'cloud security reference architecture'?

Which TWO are common 'secure access design patterns' in a hybrid cloud?

You are designing a secure access path for a BYOD device. What is the most effective approach to ensure the device does not compromise the network?

When designing a Zero Trust architecture using Cisco Secure Access, how does the 'Device Posture' check specifically influence the access decision for a managed laptop?

You are setting up a secure hybrid cloud environment. How do you implement 'Micro-segmentation' between virtual machines in the same subnet?

What is the primary goal of the 'Cisco SASE' framework?

In the context of SASE, what is the primary role of the 'Global Anycast Network'?

Which THREE factors should be considered when designing an IaaS security architecture using Cisco Secure Workload (formerly Tetration)?

Which THREE types of information are analyzed by Cisco Secure Workload (Tetration) to enforce micro-segmentation?

A security architect is designing a SASE solution. What is the significance of 'Identity-Based Segmentation' in this design?

You are designing a secure remote access solution for a hybrid cloud environment. Which Cisco technology should you implement to replace a traditional VPN while enforcing Zero Trust principles?

When implementing a ZTNA solution, which factor is most crucial when defining an 'Application Access Policy'?