Question 1

Which two benefits does AMP provide compared to the other scanning engines on the Cisco WSA? (Choose two.)

Accepted Answer

A)  protection against malware 
B)  protection against zero-day attacks 
C)  protection against spam 
D)  protection against viruses 
E)  protection against targeted file-based attacks 
A)  protection against malware 
B)  protection against zero-day attacks 
C)  protection against spam 
D)  protection against viruses 
E)  protection against targeted file-based attacks

Question 2

How does dynamic content analysis improve URL categorization?

Accepted Answer

A)  It analyzes content based on cached destination content 
B)  It adds intelligence to detect categories by analyzing responses 
C)  It can be used as the only URL analysis method 
D)  It analyzes content of categorized URL to tune decisions and correct categorization errors 
A)  It analyzes content based on cached destination content 
B)  It adds intelligence to detect categories by analyzing responses 
C)  It can be used as the only URL analysis method 
D)  It analyzes content of categorized URL to tune decisions and correct categorization errors

Question 3

A network administrator noticed that all traffic that is redirected to the Cisco WSA from the Cisco ASA firewall cannot get to the Internet in a Transparent proxy environment using WCCP. Which troubleshooting action must be taken on the CLI to make sure that WCCP communication is not failing?

Accepted Answer

A)  Disable WCCP to see if the WCCP service is causing the issue 
B)  Explicitly point the browser to the proxy 
C)  Ping the WCCP device 
D)  Check WCCP logs in debug mode 
A)  Disable WCCP to see if the WCCP service is causing the issue 
B)  Explicitly point the browser to the proxy 
C)  Ping the WCCP device 
D)  Check WCCP logs in debug mode

Question 4

Which statement about Cisco Advanced Web Security Reporting integration is true?

Accepted Answer

A)  AWSR uses IP addresses to differentiate Cisco WSA deployments 
B)  AWSR does not require a license to index data 
C)  AWSR can remove log files after they are indexed 
D)  AWSR installation is CLI-based on Windows and Red Hat Linux systems 
A)  AWSR uses IP addresses to differentiate Cisco WSA deployments 
B)  AWSR does not require a license to index data 
C)  AWSR can remove log files after they are indexed 
D)  AWSR installation is CLI-based on Windows and Red Hat Linux systems

Question 5

Which information within Cisco Advanced Web Security Reporting is used to generate a report that lists visited domains?

Accepted Answer

A)  URL categories 
B)  web reputation 
C)  websites 
D)  application visibility 
A)  URL categories 
B)  web reputation 
C)  websites 
D)  application visibility

Question 6

Which behavior is seen while the policy trace tool is used to troubleshoot a Cisco WSA?

Accepted Answer

A)  External DLP polices are evaluated by the tool 
B)  A real client request is processed and an EUN page is displayed 
C)  SOCKS policies are evaluated by the tool 
D)  The web proxy does not record the policy trace test requests in the access log when the tool is in use 
A)  External DLP polices are evaluated by the tool 
B)  A real client request is processed and an EUN page is displayed 
C)  SOCKS policies are evaluated by the tool 
D)  The web proxy does not record the policy trace test requests in the access log when the tool is in use

Question 7

What is a benefit of integrating Cisco Cognitive Threat Analytics with a Cisco WSA?

Accepted Answer

A)  It adds additional information to the Cisco WSA reports 
B)  It adds additional malware protection to the Cisco WSA 
C)  It provides the ability to use artificial intelligence to block viruses 
D)  It reduces time to identify threats in the network 
A)  It adds additional information to the Cisco WSA reports 
B)  It adds additional malware protection to the Cisco WSA 
C)  It provides the ability to use artificial intelligence to block viruses 
D)  It reduces time to identify threats in the network

Question 8

What is the function of a PAC file on a Cisco WSA?

Accepted Answer

A)  The file allows redirection of web traffic to a specific proxy server 
B)  The file is mandatory for a transparent proxy to redirect user traffic 
C)  The file provides instructions about which URL categories are permitted 
D)  The file is mandatory for an explicit proxy to forward user traffic 
A)  The file allows redirection of web traffic to a specific proxy server 
B)  The file is mandatory for a transparent proxy to redirect user traffic 
C)  The file provides instructions about which URL categories are permitted 
D)  The file is mandatory for an explicit proxy to forward user traffic

Question 9

Which two configuration options are available on a Cisco WSA within a decryption policy? (Choose two.)

Accepted Answer

A)  Pass Through 
B)  Warn 
C)  Decrypt 
D)  Allow 
E)  Block 
A)  Pass Through 
B)  Warn 
C)  Decrypt 
D)  Allow 
E)  Block

Exam 26: Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

Which two benefits does AMP provide compared to the other scanning engines on the Cisco WSA? (Choose two.)

How does dynamic content analysis improve URL categorization?

A network administrator noticed that all traffic that is redirected to the Cisco WSA from the Cisco ASA firewall cannot get to the Internet in a Transparent proxy environment using WCCP. Which troubleshooting action must be taken on the CLI to make sure that WCCP communication is not failing?

Which statement about Cisco Advanced Web Security Reporting integration is true?

Which information within Cisco Advanced Web Security Reporting is used to generate a report that lists visited domains?

Which behavior is seen while the policy trace tool is used to troubleshoot a Cisco WSA?

What is a benefit of integrating Cisco Cognitive Threat Analytics with a Cisco WSA?

What is the function of a PAC file on a Cisco WSA?

Which two configuration options are available on a Cisco WSA within a decryption policy? (Choose two.)

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Cisco Certified Network Associate (CCNA)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Implementing Cisco SD-WAN Solutions (ENSDWI)

Designing Cisco Enterprise Networks (ENSLD)

Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Configuring Cisco MDS 9000 Series Switches (DCSAN)

Implementing Cisco Application Centric Infrastructure - Advanced

Automating Cisco Data Center Solutions (DCAUTO)

Securing Networks with Cisco Firepower (300-710 SNCF)

Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Securing Email with Cisco Email Security Appliance (300-720 SESA)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing and Operating Cisco Security Core Technologies

Implementing Cisco Collaboration Core Technologies (CLCOR)

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

CCDE Design Written

Deploying Cisco Unified Contact Center Express

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Designing Cisco Unified Contact Center Enterprise (UCCED)

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Cisco Security Architecture for System Engineers

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters