CiscoCisco
350-701 · Question #432
350-701 Question #432: Real Exam Question with Answer & Explanation
The correct answer is C: Cisco Umbrella. Cisco Umbrella provides DNS-layer security, protecting users by blocking access to malicious domains before a connection is ever established.
Submitted by deeparc· Mar 30, 2026
Question
Which security solution protects users leveraging DNS-layer security?
Options
- ACisco ISE
- BCisco FTD
- CCisco Umbrella
- DCisco ASA
Explanation
Cisco Umbrella provides DNS-layer security, protecting users by blocking access to malicious domains before a connection is ever established.
Common mistakes.
- A. Cisco ISE (Identity Services Engine) is an identity and access control policy platform, not primarily a DNS-layer security solution.
- B. Cisco FTD (Firepower Threat Defense) is a next-generation firewall and IPS, primarily operating at network and application layers, not specifically at the DNS layer for external domain resolution.
- D. Cisco ASA (Adaptive Security Appliance) is a traditional firewall and VPN concentrator, also operating at network and application layers, and does not inherently provide DNS-layer security for external threats.
Concept tested. DNS-layer security solution
Reference. https://docs.umbrella.com/umbrella-user-guide/docs/about-umbrella
Topics
#DNS security#Cisco Umbrella
Community Discussion
No community discussion yet for this question.