Question 1

When an access policy is created, what is the default option for the Application Settings?

Accepted Answer

A)  Use Global Policy Applications Settings 
B)  Define the Applications Custom Setting 
C)  Set all applications to Block 
D)  Set all applications to Monitor 
A)  Use Global Policy Applications Settings 
B)  Define the Applications Custom Setting 
C)  Set all applications to Block 
D)  Set all applications to Monitor

Question 2

Which two caches must be cleared on a Cisco WSA to resolve an issue in processing requests? (Choose two.)

Accepted Answer

A)  authentication cache 
B)  application cache 
C)  logging cache 
D)  DNS cache 
E)  HTTP cache 
A)  authentication cache 
B)  application cache 
C)  logging cache 
D)  DNS cache 
E)  HTTP cache

Question 3

What is a valid predefined time range when configuring a Web Tracking query?

Accepted Answer

A)  year 
B)  minute 
C)  hour 
D)  month 
A)  year 
B)  minute 
C)  hour 
D)  month

Question 4

A user browses to a company website that is categorized as "Business and Industry" and contains a Facebook post. The user cannot see the Facebook post because the category "Social Networking" is blocked. Which configuration allows the user to see the Facebook post?

Accepted Answer

A)    
B)    
C)    
D)    
A)    
B)    
C)    
D)

Question 5

What is needed to enable an HTTPS proxy?

Accepted Answer

A)  self-signed server certificate 
B)  trusted third-party CA signed root certificate 
C)  self-signed CSR 
D)  self-signed root certificate 
A)  self-signed server certificate 
B)  trusted third-party CA signed root certificate 
C)  self-signed CSR 
D)  self-signed root certificate

Question 6

Which certificate format does a Cisco WSA need when HTTPS proxy is configured?

Accepted Answer

A)  DER 
B)  CER 
C)  PEM 
D)  CRL 
A)  DER 
B)  CER 
C)  PEM 
D)  CRL

Question 7

What is the default action when a new custom category is created and added to an access policy?

Accepted Answer

A)  monitor 
B)  allow 
C)  block 
D)  decrypt 
A)  monitor 
B)  allow 
C)  block 
D)  decrypt

Question 8

Which method is used by AMP against zero-day and targeted file-based attacks?

Accepted Answer

A)  analyzing behavior of all files that are not yet known to the reputation service 
B)  periodically evaluating emerging threats as new information becomes available 
C)  implementing security group tags 
D)  obtaining the reputation of known files 
A)  analyzing behavior of all files that are not yet known to the reputation service 
B)  periodically evaluating emerging threats as new information becomes available 
C)  implementing security group tags 
D)  obtaining the reputation of known files

Question 9

An administrator wants to restrict file uploads to Facebook using the AVC feature. Under which two actions must the administrator apply this restriction to an access policy? (Choose two.)

Accepted Answer

A)  Monitor Facebook General 
B)  Monitor Social Networking 
C)  Monitor Facebook Photos and Videos 
D)  Monitor Facebook Messages and Chat 
E)  Monitor Facebook Application 
A)  Monitor Facebook General 
B)  Monitor Social Networking 
C)  Monitor Facebook Photos and Videos 
D)  Monitor Facebook Messages and Chat 
E)  Monitor Facebook Application

Question 10

Which statement about configuring an identification profile for machine authentication is true?

Accepted Answer

A)  Cloud Web Security Connector mode with an active directory enabled supports machine authentication 
B)  Identification profile machine ID is supported locally, but the Cisco WSA does not support machine ID authentication 
C)  Cloud Web Security with Kerberos enabled supports machine authentication 
D)  If an Active Directory realm is used, identification can be performed for an authenticated user or IP address but not for a machine ID 
A)  Cloud Web Security Connector mode with an active directory enabled supports machine authentication 
B)  Identification profile machine ID is supported locally, but the Cisco WSA does not support machine ID authentication 
C)  Cloud Web Security with Kerberos enabled supports machine authentication 
D)  If an Active Directory realm is used, identification can be performed for an authenticated user or IP address but not for a machine ID

Question 11

How does the Cisco WSA choose which scanning engine verdict to use when there is more than one verdict?

Accepted Answer

A)  based on the least restrictive verdict 
B)  based on the most restrictive verdict 
C)  based on the first verdict returned 
D)  based on the last verdict returned 
A)  based on the least restrictive verdict 
B)  based on the most restrictive verdict 
C)  based on the first verdict returned 
D)  based on the last verdict returned

Question 12

What is the purpose of using AMP file analysis on a Cisco WSA to continuously evaluate emerging threats?

Accepted Answer

A)  to take appropriate action on new files that enter the network 
B)  to remove files from quarantine by stopping their retention period 
C)  to notify you of files that are determined to be threats after they have entered your network 
D)  to send all files downloaded through the Cisco WSA to the AMP cloud 
A)  to take appropriate action on new files that enter the network 
B)  to remove files from quarantine by stopping their retention period 
C)  to notify you of files that are determined to be threats after they have entered your network 
D)  to send all files downloaded through the Cisco WSA to the AMP cloud

Question 13

By default, which two pieces of information does the Cisco WSA access log contain? (Choose two.)

Accepted Answer

A)  HTTP Request Code 
B)  Content Type 
C)  Client IP Address 
D)  User Agent 
E)  Transaction ID 
A)  HTTP Request Code 
B)  Content Type 
C)  Client IP Address 
D)  User Agent 
E)  Transaction ID

Question 14

Which two log types does the Cisco WSA provide to troubleshoot Cisco data security and external data loss prevention policies? (Choose two.)

Accepted Answer

A)  upload data 
B)  data security 
C)  default proxy 
D)  data access 
E)  external data 
A)  upload data 
B)  data security 
C)  default proxy 
D)  data access 
E)  external data

Question 15

Which command is used to flush a single user from authentication memory?

Accepted Answer

A)  isedata 
B)  authcache 
C)  diagnostic 
D)  clear 
A)  isedata 
B)  authcache 
C)  diagnostic 
D)  clear

Question 16

What is the primary benefit of using Cisco Advanced Web Security Reporting?

Accepted Answer

A)  ability to see the malicious activity of a user 
B)  L4TM report with client-malware risk 
C)  centralized and granular reporting 
D)  access to a day report with historical data 
A)  ability to see the malicious activity of a user 
B)  L4TM report with client-malware risk 
C)  centralized and granular reporting 
D)  access to a day report with historical data

Question 17

Which two sources provide data to Cisco Advanced Web Security Reporting to create dashboards? (Choose two.)

Accepted Answer

A)  Cisco WSA devices 
B)  Cisco ISE 
C)  Cisco ASAv 
D)  Cisco Security MARS 
E)  Cisco Cloud Web Security gateways 
A)  Cisco WSA devices 
B)  Cisco ISE 
C)  Cisco ASAv 
D)  Cisco Security MARS 
E)  Cisco Cloud Web Security gateways

Question 18

When a Cisco WSA is installed with default settings, which port is assigned to the web proxy if the M1 port is used exclusively for management?

Accepted Answer

A)  T1 
B)  P2 
C)  T2 
D)  P1 
A)  T1 
B)  P2 
C)  T2 
D)  P1

Question 19

Which IP address and port are used by default to run the system setup wizard?

Accepted Answer

A)  http://192.168.42.42:80 
B)  https://192.168.42.42:8080 
C)  https://192.168.42.10:8443 
D)  http://192.168.43.42:8080 
A)  http://192.168.42.42:80 
B)  https://192.168.42.42:8080 
C)  https://192.168.42.10:8443 
D)  http://192.168.43.42:8080

Question 20

Which configuration option is suitable for explicit mode deployment?

Accepted Answer

A)  PAC 
B)  WCCP 
C)  ITD 
D)  PBR 
A)  PAC 
B)  WCCP 
C)  ITD 
D)  PBR

Exam 26: Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

When an access policy is created, what is the default option for the Application Settings?

Which two caches must be cleared on a Cisco WSA to resolve an issue in processing requests? (Choose two.)

What is a valid predefined time range when configuring a Web Tracking query?

A user browses to a company website that is categorized as "Business and Industry" and contains a Facebook post. The user cannot see the Facebook post because the category "Social Networking" is blocked. Which configuration allows the user to see the Facebook post?

What is needed to enable an HTTPS proxy?

Which certificate format does a Cisco WSA need when HTTPS proxy is configured?

What is the default action when a new custom category is created and added to an access policy?

Which method is used by AMP against zero-day and targeted file-based attacks?

An administrator wants to restrict file uploads to Facebook using the AVC feature. Under which two actions must the administrator apply this restriction to an access policy? (Choose two.)

Which statement about configuring an identification profile for machine authentication is true?

How does the Cisco WSA choose which scanning engine verdict to use when there is more than one verdict?

What is the purpose of using AMP file analysis on a Cisco WSA to continuously evaluate emerging threats?

By default, which two pieces of information does the Cisco WSA access log contain? (Choose two.)

Which two log types does the Cisco WSA provide to troubleshoot Cisco data security and external data loss prevention policies? (Choose two.)

Which command is used to flush a single user from authentication memory?

What is the primary benefit of using Cisco Advanced Web Security Reporting?

Which two sources provide data to Cisco Advanced Web Security Reporting to create dashboards? (Choose two.)

When a Cisco WSA is installed with default settings, which port is assigned to the web proxy if the M1 port is used exclusively for management?

Which IP address and port are used by default to run the system setup wizard?

Which configuration option is suitable for explicit mode deployment?

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Cisco Certified Network Associate (CCNA)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Implementing Cisco SD-WAN Solutions (ENSDWI)

Designing Cisco Enterprise Networks (ENSLD)

Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Configuring Cisco MDS 9000 Series Switches (DCSAN)

Implementing Cisco Application Centric Infrastructure - Advanced

Automating Cisco Data Center Solutions (DCAUTO)

Securing Networks with Cisco Firepower (300-710 SNCF)

Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Securing Email with Cisco Email Security Appliance (300-720 SESA)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing and Operating Cisco Security Core Technologies

Implementing Cisco Collaboration Core Technologies (CLCOR)

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

CCDE Design Written

Deploying Cisco Unified Contact Center Express

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Designing Cisco Unified Contact Center Enterprise (UCCED)

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Cisco Security Architecture for System Engineers

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters