How should I use these Application And Data Security practice questions?

Read each scenario carefully and choose your answer before revealing the explanation. Then check why your choice was right or wrong. Repeat until the reasoning feels automatic.

Can I practise just Application And Data Security questions in a focused session?

Yes — use the session launcher on this page to start a 10-, 20-, 30- or 50-question session drawn entirely from the Application And Data Security domain.

SCAZT · topic practice

Application And Data Security practice questions

Practise Cisco Designing and Implementing Secure Cloud Access for Users and Endpoints (SCAZT, 300-740, CCNP Security) (SCAZT) Application And Data Security practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Reviewed byJohnson Ajibi· MSc IT Security

20 questionsDomain: Application And Data Security

Practice 10 questions Browse domain →

What the exam tests

What to know about Application And Data Security

Application And Data Security questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Watch out for

Common Application And Data Security exam traps

▸Answering from memory before reading the full scenario.
▸Missing a constraint such as cost, availability, security, scope or command context.
▸Choosing a broad answer when the question asks for the most specific fix.
▸Ignoring why the wrong options are tempting.

Practice set

Application And Data Security questions

20 questions · select your answer, then reveal the explanation

Question 1hardmultiple choice

Read the full Application And Data Security explanation →

You are implementing Cisco Umbrella CASB to restrict file uploads to unsanctioned SaaS applications. You have configured an App Control rule, but users can still upload files to a cloud storage service. What is the most likely cause?

Trap 1: The SSL inspection certificate is not installed on the server.

SSL inspection certificates must be installed on the client, not the server.

Trap 2: The SaaS application is whitelisted in the Global Settings.

While possible, the most common operational failure is the lack of proxy enforcement for DLP.

Trap 3: The DNS policy is not configured for the user group.

DNS policy would block the domain, not the specific file upload action.

Study all Application And Data Security common traps →

A
The Intelligent Proxy is disabled in the Web Policy.
Without the intelligent proxy enabled, Umbrella cannot inspect the file contents or enforce granular upload controls.
B
The SSL inspection certificate is not installed on the server.
Why wrong: SSL inspection certificates must be installed on the client, not the server.
C
The SaaS application is whitelisted in the Global Settings.
Why wrong: While possible, the most common operational failure is the lack of proxy enforcement for DLP.
D
The DNS policy is not configured for the user group.
Why wrong: DNS policy would block the domain, not the specific file upload action.

Application And Data Security practice questions

What to know about Application And Data Security

Common Application And Data Security exam traps

Application And Data Security questions

You are implementing Cisco Umbrella CASB to restrict file uploads to unsanctioned SaaS applications. You have configured an App Control rule, but users can still upload files to a cloud storage service. What is the most likely cause?

You are investigating a data leak in Google Drive using Cisco Cloudlock. You notice that a user shared a folder with the 'public'. How can you verify exactly who accessed this folder?

A security administrator needs to prevent users from downloading corporate files to personal devices using Cisco Cloudlock. Which policy type must be implemented to achieve this session-level control?

You are configuring a DLP policy in Cisco Cloudlock. Which setting allows the policy to ignore files that have been cryptographically signed by your organization's internal CA?

Which component of Cisco's secure cloud access architecture is responsible for performing URL filtering and malware scanning on traffic destined for SaaS applications?

When configuring Cisco Duo for SaaS application access, which THREE conditions can be used in a 'Policy' to restrict access to a sensitive application?

You have configured a DLP policy in Cisco Cloudlock that flags files shared with external users. You notice files shared with 'Anyone with the link' are not being flagged. What is the most likely configuration error?

In Cisco Umbrella, what is the primary purpose of defining a 'Cloud Application' in the 'App Discovery' dashboard?

You are auditing a Cisco Cloudlock deployment for O365. Which TWO methods can be used to remediate a file that violates a Data Loss Prevention policy?

Which Cisco technology provides visibility and control over SaaS applications using API-based integration to inspect data at rest?

You are configuring a Cisco Cloudlock policy to detect sensitive data in a Salesforce environment. You need to identify instances where credit card numbers are shared publicly. Which specific policy category should you configure?

When integrating Cisco Umbrella with a SaaS application, which TWO methods can be used to ensure secure user authentication?

A user is attempting to upload a file to a SaaS application, but the Cisco Umbrella Intelligent Proxy blocks it. What is the most effective way to troubleshoot the block?

Which THREE criteria can be used to classify a 'Shadow IT' application in Cisco Umbrella?

Which THREE data types are commonly supported by the Cisco Cloudlock DLP engine for pattern matching?

Which feature in Cisco Cloudlock allows administrators to view a dashboard of users who are behaving outside of their normal baseline?

When configuring an OAuth policy in Cisco Cloudlock, which TWO actions can be taken against third-party applications granted access to user data?

Which Cisco Cloudlock policy type should be used to detect when a user logs in from an unusual geographic location?

You need to ensure that only corporate-managed devices can access Microsoft 365. Which component should be configured to verify the device's security posture before granting access?

What is the primary function of the 'CASB' category in Cisco Umbrella's web policy?

Track your progress over time

Start a Application And Data Security only practice session

Related SCAZT topic practice pages

User And Device Security practice questions

Visibility And Assurance practice questions

Application And Data Security practice questions

Threat Response practice questions

Cloud Security Architecture practice questions

Network And Cloud Security practice questions

SCAZT fundamentals practice questions

SCAZT scenario practice questions

SCAZT troubleshooting practice questions

Frequently asked questions

Track your progress

Study resources

Exam traps to avoid