Free Designing and Implementing Secure Cloud Access for Users and Endpoints (SCAZT) Exam 300-740 Exam Practice Test

Refer to the exhibit.

• Reinstall the host from a recent backup.
• Quarantine the host
• Reinstall the host from scratch.
• Create a firewall rule that has a source of linux-gcp-east-4c, a destination of Any, and a protocol of SSH.
• Create a firewall rule that has a source of Any, a destination of linux-gcp-east-4c, and a protocol of SSH.

Which common strategy should be used to mitigate directory traversal attacks in a cloud environment?

• Use anti-cross-site request forgery tokens.
• Apply the principle of least privilege.
• Implement functionality validation.
• Limit file system permissions.

According to Cisco Security Reference Architecture, which solution provides threat intelligence and malware analytics?

• Cisco pxGrid
• Cisco XDR
• Cisco Talos
• Cisco Umbrella

A recent InfraGard news release indicates the need to establish a risk ranking for all on-premises and cloud services. The ACME Corporation already performs risk assessments for on-premises services and has applied a risk ranking to them. However, the cloud services that were used lack risk rankings. What Cisco Umbrella function should be used to meet the requirement?

• Secure Internet Gateway
• Domain Name Server Filtering
• URL Categorization by Talos
• App Discovery

An engineer is configuring multifactor authentication using Duo. The implementation must use Duo Authentication Proxy and the Active Directory as an identity source. The company uses Azure and a local Active Directory. Which configuration is needed to meet the requirement?

• Configure the Identity Source as "SAML" on the Single Sign-On tab in the Duo Admin Panel, and configure the forwarding proxy as "local" for the Identity Source.
• Configure the Identity Source as "SAML" on the Single Sign-On tab, and configure the authentication proxy with the "[cloud]" section.
• Configure the Identity Source as "Active Directory" on the Single Sign-On tab in the Duo Admin Panel, and configure the permit list to "Local database".
• Configure the Identity Source as "Active Directory" on the Single Sign-On tab, and configure the authentication proxy with the "[sso]" section.

Which SAFE component logically arranges the security capabilities into blueprints?

• Reference Architectures
• Cisco Validated Designs
• Places in the Network
• Secure Domains

An organization is distributed across several sites. Each site is connected to the main HQ using site- to-site VPNs implemented using Secure Firewall Threat Defense. Which functionality must be implemented if the security manager wants to send SaaS traffic directly to the internet?

• Multi-instances
• IPsec tunnels
• Policy-based routing
• ECMP routing

Which concept is used in the Cisco SAFE key reference model?

• Secure Domains
• Cloud Edge
• Security Intelligence
• Threat Defense

What is associated with implementing Cisco zero-trust architecture?

• It verifies trust before granting access to resources.
• It focuses on perimeter-based security.
• It assumes that all network traffic is trustworthy.
• It provides the same security as the VPN technology.

Which method is used by a Cisco XDR solution to prioritize actions?

• Updating antivirus signatures
• Monitoring endpoint activity
• Leveraging AI and machine learning
• Analyzing network traffic patterns