300-740 Exam Dumps : Designing and Implementing Secure Cloud Access for Users and Endpoints (SCAZT)

After Cloudlock is integrated with Salesforce, full visibility into objects and data requires that Cloudlock has the “View All Data” permission enabled on the connected Salesforce account. This permission allows the Cloudlock API connection to access all user data, regardless of individual field-level or sharing rules. Without it, Cloudlock will be limited in its visibility scope.

As per SCAZT (Section 4: Application and Data Security, Pages 86–89), integration with SaaS platforms like Salesforce must include enabling comprehensive data visibility to perform effective risk analysis and policy enforcement.

From the firewall access rules provided, Rule 1 allows traffic from 20.1.1.10 (GCP VM) to 20.1.1.1 using HTTPS. However, this destination is not the actual mail server—the mail server resides at 192.168.200.10 (inside network). Therefore:

A: Rule 1 must be updated to reflect the correct destination: 192.168.200.10. Without this change, traffic is not permitted to the mail server.

D: NAT (Network Address Translation) is needed to translate the external address (e.g., 20.1.1.10) to access internal addresses (like 192.168.200.10). As per SCAZT and Cisco firewall policies, NAT enables proper packet delivery from public to private zones.

Rule 2, which denies all other traffic, is correctly placed after the specific allow rule. Therefore, moving it (Option B) would not help, and Options C and E are unrelated to resolving the immediate firewall access and routing issue.

A screenshot of a phone number AI-generated content may be incorrect.