Question 1

Which type of FTP proxy does the Cisco WSA support?

Accepted Answer

A)  non-native FTP 
B)  FTP over UDP tunneling 
C)  FTP over HTTP 
D)  hybrid FTP 
A)  non-native FTP 
B)  FTP over UDP tunneling 
C)  FTP over HTTP 
D)  hybrid FTP C

Question 2

Which two modes of operation does the Cisco WSA provide? (Choose two.)

Accepted Answer

A)  connector 
B)  proxy 
C)  transparent 
D)  standard 
E)  explicit 
A)  connector 
B)  proxy 
C)  transparent 
D)  standard 
E)  explicit C,E

Question 3

Which key is needed to pair a Cisco WSA and Cisco ScanCenter for CTA?

Accepted Answer

A)  public SSH key that the Cisco WSA generates 
B)  public SSH key that Cisco ScanCenter generates 
C)  private SSH key that Cisco ScanCenter generates 
D)  private SSH key that the Cisco WSA generates 
A)  public SSH key that the Cisco WSA generates 
B)  public SSH key that Cisco ScanCenter generates 
C)  private SSH key that Cisco ScanCenter generates 
D)  private SSH key that the Cisco WSA generates A

Question 4

Which two configuration options can be configured when invalid certificates are processed with the HTTPS proxy on WSA enabled? (Choose two.)

Accepted Answer

A)  allow 
B)  monitor 
C)  drop 
D)  block 
E)  redirect 
A)  allow 
B)  monitor 
C)  drop 
D)  block 
E)  redirect

Question 5

Which information in the HTTP request is used to determine if it is subject to the referrer exceptions feature in the Cisco WSA?

Accepted Answer

A)  protocol 
B)  version 
C)  header 
D)  payload 
A)  protocol 
B)  version 
C)  header 
D)  payload

Question 6

What must be configured to require users to click through an acceptance page before they are allowed to go to the Internet through the Cisco WSA?

Accepted Answer

A)  Enable End-User Acknowledgement Page and set to Required in Identification Profiles Enable End-User Acknowledgement Page and set to Required in Identification Profiles 
B)  Enable End -User URL Filtering Warning Page and set to Required in Identification Profiles Enable End -User URL Filtering Warning Page and set to 
C)  Enable End-User Acknowledgement Page and set to Required in Access Policies in Access Policies 
D)  Enable End-User URL Filtering Warning Page and set to Required in Access Policies Enable End-User URL Filtering Warning Page and set to 
A)  Enable End-User Acknowledgement Page and set to Required in Identification Profiles Enable End-User Acknowledgement Page and set to Required in Identification Profiles 
B)  Enable End -User URL Filtering Warning Page and set to Required in Identification Profiles Enable End -User URL Filtering Warning Page and set to 
C)  Enable End-User Acknowledgement Page and set to Required in Access Policies in Access Policies 
D)  Enable End-User URL Filtering Warning Page and set to Required in Access Policies Enable End-User URL Filtering Warning Page and set to

Question 7

Which two features on the Cisco WSA help prevent outbound data loss for HTTP or FTP traffic? (Choose two.)

Accepted Answer

A)  web reputation filters 
B)  Advanced Malware Protection 
C)  third-party DLP integration 
D)  data security filters 
E)  SOCKS proxy 
A)  web reputation filters 
B)  Advanced Malware Protection 
C)  third-party DLP integration 
D)  data security filters 
E)  SOCKS proxy

Question 8

What causes authentication failures on a Cisco WSA when LDAP is used for authentication?

Accepted Answer

A)  when the passphrase contains only 5 characters 
B)  when the passphrase contains characters that are not 7-bit ASCI 
C)  when the passphrase contains one of following characters '@ # $ % ^' 
D)  when the passphrase contains 50 characters 
A)  when the passphrase contains only 5 characters 
B)  when the passphrase contains characters that are not 7-bit ASCI 
C)  when the passphrase contains one of following characters '@ # $ % ^' 
D)  when the passphrase contains 50 characters

Question 9

What must be configured first when creating an access policy that matches the Active Directory group?

Accepted Answer

A)  authentication, authorization, and accounting of groups 
B)  FQDN specification 
C)  authentication realm 
D)  authorized groups specification 
A)  authentication, authorization, and accounting of groups 
B)  FQDN specification 
C)  authentication realm 
D)  authorized groups specification

Question 10

Which port is configured in a browser to use the Cisco WSA web proxy with default settings?

Accepted Answer

A)  8080 
B)  8443 
C)  8021 
D)  3128 
A)  8080 
B)  8443 
C)  8021 
D)  3128

Question 11

Refer to the exhibit. Which command displays this output?

Accepted Answer

A)  grep 
B)  logconfig 
C)  rollovernow 
D)  tail 
A)  grep 
B)  logconfig 
C)  rollovernow 
D)  tail

Question 12

What is required on the Cisco WSA when an AMP file reputation server private cloud is configured?

Accepted Answer

A)  private key from the server to encrypt messages 
B)  private key to decrypt messages 
C)  public and private keys from the server 
D)  public key from the server 
A)  private key from the server to encrypt messages 
B)  private key to decrypt messages 
C)  public and private keys from the server 
D)  public key from the server

Question 13

What is used to configure WSA as an explicit proxy?

Accepted Answer

A)  IP Spoofing from router 
B)  Network settings from user browser 
C)  WCCP redirection from firewall 
D)  Auto redirection using PBR from switch 
A)  IP Spoofing from router 
B)  Network settings from user browser 
C)  WCCP redirection from firewall 
D)  Auto redirection using PBR from switch

Question 14

What are all of the available options for configuring an exception to blocking for referred content?

Accepted Answer

A)  all embedded/referred and all embedded/referred except 
B)  selected embedded/referred except, all embedded/referred, and selected embedded/referred 
C)  selected embedded/referred and all embedded/referred except 
D)  all embedded/referred, selected embedded/referred, and all embedded/referred except 
A)  all embedded/referred and all embedded/referred except 
B)  selected embedded/referred except, all embedded/referred, and selected embedded/referred 
C)  selected embedded/referred and all embedded/referred except 
D)  all embedded/referred, selected embedded/referred, and all embedded/referred except

Question 15

Which two parameters are mandatory to control access to websites with proxy authentication on a Cisco WSA? (Choose two.)

Accepted Answer

A)  External Authentication 
B)  Identity Enabled Authentication 
C)  Transparent User Identification 
D)  Credential Encryption 
E)  Authentication Realm 
A)  External Authentication 
B)  Identity Enabled Authentication 
C)  Transparent User Identification 
D)  Credential Encryption 
E)  Authentication Realm

Question 16

Which configuration mode does the Cisco WSA use to create an Active Directory realm for Kerberos authentication?

Accepted Answer

A)  Forward 
B)  Connector 
C)  Transparent 
D)  Standard 
A)  Forward 
B)  Connector 
C)  Transparent 
D)  Standard

Question 17

Which statement about identification profile default settings on the Cisco WSA is true?

Accepted Answer

A)  Identification profiles do not require authentication 
B)  Guest identification profile should be processed first 
C)  Identification profiles can include only one user group 
D)  AsyncOS processes identification profiles alphabetically 
A)  Identification profiles do not require authentication 
B)  Guest identification profile should be processed first 
C)  Identification profiles can include only one user group 
D)  AsyncOS processes identification profiles alphabetically

Question 18

Which two caching modes are available in the Cisco WSA? (Choose two.)

Accepted Answer

A)  active cache 
B)  all cache 
C)  aggressive cache 
D)  safe cache 
E)  no cache 
A)  active cache 
B)  all cache 
C)  aggressive cache 
D)  safe cache 
E)  no cache

Question 19

Which type of certificate must be installed on a Cisco WSA for HTTPS inspection?

Accepted Answer

A)  server 
B)  client 
C)  root 
D)  wildcard 
A)  server 
B)  client 
C)  root 
D)  wildcard

Question 20

Which statement about the SOCKS proxy is true?

Accepted Answer

A)  SOCKS is a general purpose proxy 
B)  SOCKS operates on TCP port 80, 443, and 8334 
C)  SOCKS is used only for traffic that is redirected through a firewall 
D)  SOCKS is used for UDP traffic only 
A)  SOCKS is a general purpose proxy 
B)  SOCKS operates on TCP port 80, 443, and 8334 
C)  SOCKS is used only for traffic that is redirected through a firewall 
D)  SOCKS is used for UDP traffic only

Exam 26: Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

Which type of FTP proxy does the Cisco WSA support?

Which two modes of operation does the Cisco WSA provide? (Choose two.)

Which key is needed to pair a Cisco WSA and Cisco ScanCenter for CTA?

Which two configuration options can be configured when invalid certificates are processed with the HTTPS proxy on WSA enabled? (Choose two.)

Which information in the HTTP request is used to determine if it is subject to the referrer exceptions feature in the Cisco WSA?

What must be configured to require users to click through an acceptance page before they are allowed to go to the Internet through the Cisco WSA?

Which two features on the Cisco WSA help prevent outbound data loss for HTTP or FTP traffic? (Choose two.)

What causes authentication failures on a Cisco WSA when LDAP is used for authentication?

What must be configured first when creating an access policy that matches the Active Directory group?

Which port is configured in a browser to use the Cisco WSA web proxy with default settings?

Refer to the exhibit. Which command displays this output?

What is required on the Cisco WSA when an AMP file reputation server private cloud is configured?

What is used to configure WSA as an explicit proxy?

What are all of the available options for configuring an exception to blocking for referred content?

Which two parameters are mandatory to control access to websites with proxy authentication on a Cisco WSA? (Choose two.)

Which configuration mode does the Cisco WSA use to create an Active Directory realm for Kerberos authentication?

Which statement about identification profile default settings on the Cisco WSA is true?

Which two caching modes are available in the Cisco WSA? (Choose two.)

Which type of certificate must be installed on a Cisco WSA for HTTPS inspection?

Which statement about the SOCKS proxy is true?

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Cisco Certified Network Associate (CCNA)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Implementing Cisco SD-WAN Solutions (ENSDWI)

Designing Cisco Enterprise Networks (ENSLD)

Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Configuring Cisco MDS 9000 Series Switches (DCSAN)

Implementing Cisco Application Centric Infrastructure - Advanced

Automating Cisco Data Center Solutions (DCAUTO)

Securing Networks with Cisco Firepower (300-710 SNCF)

Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Securing Email with Cisco Email Security Appliance (300-720 SESA)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing and Operating Cisco Security Core Technologies

Implementing Cisco Collaboration Core Technologies (CLCOR)

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

CCDE Design Written

Deploying Cisco Unified Contact Center Express

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Designing Cisco Unified Contact Center Enterprise (UCCED)

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Cisco Security Architecture for System Engineers

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters