350-701 Question #279: Real Exam Question with Answer & Explanation

Submitted by paula_co· Mar 30, 2026Note: The question is incomplete as the benefit descriptions (right-side items) are not provided in the source data, making it impossible to fully validate specific pairings. Based on available information, this question tests knowledge of Cisco security product differentiation, typically falling under the CCNA Security, CCNP Security, or CyberOps Associate domain: 'Security Concepts and Network Security Solutions' - specifically identifying the distinct capabilities of Cisco Stealthwatch (behavioral analytics/threat detection), Cisco ISE (identity and access policy), Cisco TrustSec (segmentation/SGT enforcement), and Cisco Umbrella (DNS-layer/cloud-delivered security).

Question

Drag and Drop Question Drag and drop the solutions from the left onto the solution's benefits on the right. Answer:

Explanation

Each Cisco security solution maps to a distinct benefit: Cisco Stealthwatch provides network visibility and threat detection through flow telemetry analysis; Cisco ISE (Identity Services Engine) delivers policy-based access control and network admission control by verifying user/device identity; Cisco TrustSec enforces software-defined segmentation using Security Group Tags (SGTs) to control lateral movement; and Cisco Umbrella provides DNS-layer security and secure internet gateway protection against threats before they reach the network. These mappings reflect each product's primary architectural role in the Cisco security portfolio.

Topics

#Cisco Security Portfolio#Network Security Solutions#Zero Trust#Threat Detection

Community Discussion

No community discussion yet for this question.

Full 350-701 Practice Browse All 350-701 Questions