700-765: Security Architecture for System Engineers

Answer: B, C, E Security visibility and controls must cover applications, networks, and data: applications can introduce exploitable interfaces, networks can expose traffic and enable lateral movement, and data can be accessed or exfiltrated without adequate protection. Cisco describes security controls spanning applications and data, while its network-security guidance emphasizes visibility and protection across network traffic. **Learn more:** [Cisco Catalyst SD-WAN Solution Overview](https://www.cisco.com/c/en/us/solutions/collateral/enterprise-networks/sd-wan/nb-06-sd-wan-sol-overview-cte-en.html) · [Cisco Modernizing Cybersecurity in Healthcare](https://www.cisco.com/c/en/us/products/collateral/security/modernizing-cybersecurity-healthcare-sb.html)

Answer: C, D Secure access must protect both the workforce—people and their devices accessing resources—and workloads—applications and services that communicate with other resources. Cisco’s zero-trust guidance includes securing user access and protecting or segmenting workloads as distinct security domains. **Learn more:** [Cisco Zero Trust Security](https://www.cisco.com/site/us/en/solutions/security/zero-trust/index.html) · [Cisco SASE and SSE Architecture Guide](https://www.cisco.com/c/en/us/solutions/collateral/enterprise/design-zone-security/sase-sse-ag.html)

Answer: B Multi-factor authentication (MFA) verifies a user’s identity by requiring more than one form of authentication before access is granted.