Implementing and Operating Cisco Security Core Technologies (SCOR)654 questions across 66 pages are complete and free, with no account or card.
654 questions in this bank
Free access · progress saved on this device
Which technology reduces data loss by identifying sensitive information stored in public computing environments?
Answer: D
Reference: https://www.cisco.com/c/dam/en/us/products/collateral/security/cloudlock/cisco-cloudlock-cloud-data-security-datasheet.pdf
In which cloud services model is the tenant responsible for virtual machine OS patching?
Answer: A
I believe the conflict here came from the responsibility For first sight I thought it's C as in PaaS you own the OS, but in fact vendor handing over OS but you use it for your own application, so you're responsible for Application only On the other hand IaaS you have the Infra including OS, but you're responsible for everything including OS patching. If the question was about what model where you have OS then it's PaaS The correct answer is A
Source: Adapted from community discussion — loser4fun
What is the function of Cisco Cloudlock for data security?
Answer: A
Reference: https://umbrella.cisco.com/products/casb
Source: Adapted from community discussion — bigdadzzz
Which feature is supported when deploying Cisco ASAv within AWS public cloud?
Answer: B
Reference: https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/asav/quick-start-book/asav-96-qsg/asav-aws.html
Source: Adapted from community discussion — abdulmalik_mail
Which cloud service model offers an environment for cloud consumers to develop and deploy applications without needing to manage or maintain the underlying cloud infrastructure?
Answer: A
PaaS is the correct answer. With SaaS, the customer will only use the application, they won't have to develop nor deploy anything.
Source: Adapted from community discussion — pr0fectus
Which risk is created when using an Internet browser to access cloud-based service?
Answer: D
A - Misconfiguration of Infra, which leads to unauthorized access is CORRECT for me --> it joins 2 most often security issues of public cloud in one answer (see link below) Question states BROWSER so API is probably not an option (D). Vulnerabilities within protocol (C) - this is not specific to cloud, PROTOCOLS are being used everywhere and they are years old tuned standards with minimum vulnerabilities. Option B - connection stability (?) --> means service availability, which is also security aspect but it is not such a big issue as option A and networks are reliable today (risk is DoS / DDoS but they are not asking about it). A is correct. https://www.checkpoint.com/cyber-hub/cloud-security/what-is-cloud-security/top-cloud-security-issues-threats-and-concerns/
Source: Adapted from community discussion — NikoNiko
How is DNS tunneling used to exfiltrate data out of a corporate network?
Answer: B
I would go with B, based on the question . because we are asked how is DNS tunneling used, and the attacker encodes text information in base64 to then send it to the malicious DNS server which is mentioned at the end of the question (DNS server rebuilds the exfiltrated data) "C" does not explain how the information is encoded.
Source: Adapted from community discussion — Jetnor
What is the Cisco API-based broker that helps reduce compromises, application risks, and data breaches in an environment that is not on-premise?
Answer: B
Cisco Cloudlock is a cloud-based security platform that helps organizations reduce the risk of data breaches and application risks in an environment that is not on-premise. It is an API-based broker that provides a comprehensive set of security controls and tools to secure data in the cloud. With Cloudlock, organizations can easily monitor and secure data in cloud-based services such as Google Apps, Microsoft Office 365, Salesforce, and more. Cloudlock uses advanced security analytics and machine learning to identify and prevent threats such as data theft, malicious insider activity, and account takeover attacks. It also provides continuous monitoring and reporting to help organizations understand their security posture and identify potential risks. By using Cloudlock, organizations can reduce the risk of compromises, application risks, and data breaches, and ensure the security of their data and systems in a cloud-based environment.
Source: Adapted from community discussion — sull3y
Which two aspects of the cloud PaaS model are managed by the customer but not the provider? (Choose two.)
Answer: BE
The two aspects of the cloud PaaS model that are managed by the customer but not the provider are: B. applications: The customer is responsible for developing, deploying, and managing the applications that run on the platform. This can include custom applications or third-party applications that are integrated with the platform. E. data: The customer is responsible for storing and managing their data, including backups and disaster recovery. This may include data that is stored in databases or file systems, or data that is transmitted between different components of the application. The provider is responsible for managing the underlying infrastructure and platform components, such as virtualization, operating systems, middleware, and other components that support the applications.
Source: Adapted from community discussion — sull3y
Which public cloud provider supports the Cisco Next Generation Firewall Virtual?
Answer: C
As of this writing, GCP is now supported. So if ever the exam changes and asks for 2 answers then A & C would be the correct one.
Source: Adapted from community discussion — pr0fectus
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
350-701 practice, question 61. 654 questions available.
Version 1.0.0. How we source questions