nerdexam
Cisco

350-701 · Question #331

An administrator configures a new destination list in Cisco Umbrella so that the organization can block specific domains for its devices. What should be done to ensure that all subdomains of domain.co

The correct answer is D. Configure the domain.com address in the block list.. To block all subdomains of a specific domain in Cisco Umbrella, the administrator should simply add the root domain (e.g., domain.com) to the block list, as Umbrella automatically includes its subdomains.

Submitted by luis.pe· Mar 30, 2026Content Security

Question

An administrator configures a new destination list in Cisco Umbrella so that the organization can block specific domains for its devices. What should be done to ensure that all subdomains of domain.com are blocked?

Exhibit

350-701 question #331 exhibit

Options

  • AConfigure the *.com address in the block list.
  • BConfigure the *.domain.com address in the block list.
  • CConfigure the *domain.com address in the block list.
  • DConfigure the domain.com address in the block list.

How the community answered

(47 responses)
  • A
    6% (3)
  • B
    4% (2)
  • C
    15% (7)
  • D
    74% (35)

Why each option

To block all subdomains of a specific domain in Cisco Umbrella, the administrator should simply add the root domain (e.g., `domain.com`) to the block list, as Umbrella automatically includes its subdomains.

AConfigure the *.com address in the block list.

Configuring '*.com' would block all domains under the .com top-level domain, which is overly broad and would severely disrupt internet access.

BConfigure the *.domain.com address in the block list.

While '*.domain.com' would block subdomains, it is not strictly necessary in Cisco Umbrella as blocking 'domain.com' directly achieves the same outcome for subdomains.

CConfigure the *domain.com address in the block list.

The wildcard format '*domain.com' is generally not a valid or standard way to block all subdomains of 'domain.com' in most DNS-based filtering systems, and is superseded by Umbrella's default behavior.

DConfigure the domain.com address in the block list.Correct

In Cisco Umbrella, adding the root domain (e.g., domain.com) to a destination block list automatically ensures that all its subdomains are also blocked by default, simplifying policy configuration.

Concept tested: Cisco Umbrella domain blocking behavior

Source: https://docs.umbrella.com/umbrella-user-guide/docs/manage-destination-lists

Topics

#Cisco Umbrella#Destination lists#Domain blocking#Subdomain handling

Community Discussion

No community discussion yet for this question.

Full 350-701 Practice