nerdexam
Cisco

350-701 · Question #659

A security engineer must add destinations into a destination list in Cisco Umbrella. What describes the application of these changes?

The correct answer is C. The changes are applied immediately if the destination list is part of a policy. When modifications are made to a destination list that is already active within a Cisco Umbrella policy, these changes are applied immediately to the policy enforcement.

Submitted by yuriko_h· Mar 30, 2026Cloud Security

Question

A security engineer must add destinations into a destination list in Cisco Umbrella. What describes the application of these changes?

Options

  • AThe changes are applied only after the configuration is saved in Cisco Umbrella.
  • BThe user role of Block Page Bypass or higher is needed to perform these changes.
  • CThe changes are applied immediately if the destination list is part of a policy.
  • DThe destination list must be removed from the policy before changes are made to it.

How the community answered

(59 responses)
  • A
    5% (3)
  • B
    2% (1)
  • C
    86% (51)
  • D
    7% (4)

Why each option

When modifications are made to a destination list that is already active within a Cisco Umbrella policy, these changes are applied immediately to the policy enforcement.

AThe changes are applied only after the configuration is saved in Cisco Umbrella.

Cisco Umbrella often applies changes dynamically, especially for components already linked to active policies, without an explicit "save" action like traditional network device configurations.

BThe user role of Block Page Bypass or higher is needed to perform these changes.

The role required to modify destination lists is typically "Policy Admin" or "Full Admin," not specifically "Block Page Bypass," which relates to end-user access.

CThe changes are applied immediately if the destination list is part of a policy.Correct

In Cisco Umbrella, when a destination list is already associated with an active policy, any additions, deletions, or modifications made to that destination list are applied immediately. This ensures that policy updates for included domains or IPs take effect without requiring manual saving or explicit reapplication of the policy itself.

DThe destination list must be removed from the policy before changes are made to it.

Destination lists can be modified while they are part of a policy; there is no requirement to remove them first, which would disrupt policy enforcement during the change.

Concept tested: Cisco Umbrella destination list update behavior

Source: https://docs.umbrella.com/umbrella-user-guide/docs/manage-destination-lists

Topics

#Cisco Umbrella#Umbrella policy management#Umbrella destination lists

Community Discussion

No community discussion yet for this question.

Full 350-701 Practice