Free 300-725 Exam Braindumps certification guide Q&A [Q31-Q55]

NO.31 Which behavior is seen while the policy trace tool is used to troubleshoot a Cisco WSA?

External DLP polices are evaluated by the tool

A real client request is processed and an EUN page is displayed

SOCKS policies are evaluated by the tool

The web proxy does not record the policy trace test requests in the access log when the tool is in use

NO.32 What is required on the Cisco WSA when an AMP file reputation server private cloud is configured?

private key from the server to encrypt messages

private key to decrypt messages

public and private keys from the server

public key from the server

NO.33 Which certificate format does a Cisco WSA need when HTTPS proxy is configured?

DER

CER

PEM

CRL

NO.34 Which statement about configuring an identification profile for machine authentication is true?

Cloud Web Security Connector mode with an active directory enabled supports machine authentication

Identification profile machine ID is supported locally, but the Cisco WSA does not support machine ID authentication

Cloud Web Security with Kerberos enabled supports machine authentication

If an Active Directory realm is used, identification can be performed for an authenticated user or IP address but not for a machine ID

NO.35 Which statement about configuring an identification profile for machine authentication is true?

Cloud Web Security Connector mode with an active directory enabled supports machine authentication

Identification profile machine ID is supported locally, but the Cisco WSA does not support machine ID authentication

Cloud Web Security with Kerberos enabled supports machine authentication

If an Active Directory realm is used, identification can be performed for an authenticated user or IP address but not for a machine ID

NO.36 Which two caching modes are available in the Cisco WSA? (Choose two.)

active cache

all cache

aggressive cache

safe cache

no cache

NO.37 Which action is a valid default for the Global Access Policy in the Application Visibility Control engine on the Cisco WSA?

bandwidth limit

permit

restrict

monitor

NO.38 Which data retention periods are the standard in the cloud for Web Intelligence Reporting?

1 year for allowed traffic and 1 year for blocked traffic

45 days for allowed traffic and 1 year for blocked traffic

1 year for allowed traffic and 45 days for blocked traffic

45 days for allowed traffic and 45 days for blocked traffic

NO.39 Which statement about identification profile default settings on the Cisco WSA is true?

Identification profiles do not require authentication

Guest identification profile should be processed first

Identification profiles can include only one user group

AsyncOS processes identification profiles alphabetically

NO.40 Why is SSL certificate validation important during HTTPS inspection?

Improve routing performance

Verify website authenticity

Increase cache size

Compress web traffic

NO.41 An administrator has set up a Cisco Secure Web Appliance so users can connect to the appliance’s web GUI using non-local accounts. One of the users is able to connect to the GUI, but is unable to make any changes. What must be done to address this issue?

Examine external authentication logs to determine the role the user is assigned and modify the Cisco Secure Web Appliance settings to provide the appropriate access.

Examine GUI logs to determine the user’s username and modify the Cisco Secure Web Appliance settings to provide the appropriate access to the specified username.

Create a local user account on the Cisco Secure Web Appliance as non-local accounts cannot make changes on the Cisco Secure Web Appliance GUI.

Add the non-local account to ‘Administrators’ AD group as this is needed to make changes on the Cisco Secure Web Appliance GUI.

NO.42 Which Cisco Secure Web Appliance Web Proxy cache mode ignores the no-cache parameter?

safe

aggressive

forced

optimized

NO.43 What is used to configure WSA as an explicit proxy?

IP Spoofing from router

Network settings from user browser

WCCP redirection from firewall

Auto redirection using PBR from switch

NO.44 What are all of the available options for configuring an exception to blocking for referred content?

all embedded/referred and all embedded/referred except

selected embedded/referred except, all embedded/referred, and selected embedded/referred

selected embedded/referred and all embedded/referred except

all embedded/referred, selected embedded/referred, and all embedded/referred except

NO.45 What causes authentication failures on a Cisco WSA when LDAP is used for authentication?

when the passphrase contains only 5 characters

when the passphrase contains characters that are not 7-bit ASCI

when the passphrase contains one of following characters `@ # $ % ^’

when the passphrase contains 50 characters

NO.46 What must be configured to require users to click through an acceptance page before they are allowed to go to the Internet through the Cisco WSA?

Enable End-User Acknowledgement Page and set to Required in Identification Profiles

Enable End -User URL Filtering Warning Page and set to Required in Identification Profiles

Enable End-User Acknowledgement Page and set to Required in Access Policies

Enable End-User URL Filtering Warning Page and set to Required in Access Policies

NO.47 What is the primary benefit of enabling HTTPS decryption on Cisco Secure Web Appliance?

Reduce CPU usage

Increase bandwidth

Inspect encrypted traffic for threats

Disable SSL certificates

NO.48 Which two features on the Cisco WSA help prevent outbound data loss for HTTP or FTP traffic? (Choose two.)

web reputation filters

Advanced Malware Protection

third-party DLP integration

data security filters

SOCKS proxy

NO.49 What is used to configure WSA as an explicit proxy?

IP Spoofing from router

Network settings from user browser

WCCP redirection from firewall

Auto redirection using PBR from switch

NO.50 What is required on the Cisco WSA when an AMP file reputation server private cloud is configured?

private key from the server to encrypt messages

private key to decrypt messages

public and private keys from the server

public key from the server

NO.51 What must be configured first when creating an access policy that matches the Active Directory group?

authentication, authorization, and accounting of groups

FQDN specification

authentication realm

authorized groups specification

NO.52 Which key is needed to pair a Cisco WSA and Cisco ScanCenter for CTA?

public SSH key that the Cisco WSA generates

public SSH key that Cisco ScanCenter generates

private SSH key that Cisco ScanCenter generates

private SSH key that the Cisco WSA generates

NO.53 Which two configuration options are available on a Cisco WSA within a decryption policy?
(Choose two.)

Pass Through

Warn

Decrypt

Allow

Block

NO.54 Which response code in the access logs indicates that a transaction was blocked due to policy?

TCP_DENIED/407

TCP_DENIED/401

TCP_DENIED/403

TCP_DENIED/307

NO.55 An engineer is integrating Cisco ISE with Cisco Secure Web Appliance to enhance the web security and monitoring capabilities of the organization. The integration will provide contextual information and enhanced visibility into the type of device, user role, and posture status. Which component of Cisco ISE must be configured to meet the requirement?

Cisco ISE Endpoint Identity Store

Cisco ISE Policy Services Node

Cisco ISE Passive Identity Connector

Cisco PxGrid

admin

You May Also Like

Leave a Reply Cancel reply