السؤال #1

Refer to the exhibit. Which statement about the transaction log is true?

A. he log does not have a date and time

B. he proxy had the content and did not contact other servers

C. he transaction used TCP destination port 8187

D. he AnalizeSuspectTraffic policy group was applied to the transaction

عرض الإجابة

اجابة صحيحة: D

السؤال #2

What must be configured to require users to click through an acceptance page before they are allowed to go to the Internet through the Cisco WSA?

A. nable End-User Acknowledgement Page and set to Required in Identification Profiles

B. nable End -User URL Filtering Warning Page and set to Required in Identification Profiles

C. nable End-User Acknowledgement Page and set to Required in Access Policies

D. nable End-User URL Filtering Warning Page and set to Required in Access Policies

عرض الإجابة

اجابة صحيحة: C

السؤال #3

Which method is used by AMP against zero-day and targeted file-based attacks?

A. nalyzing behavior of all files that are not yet known to the reputation service

B. eriodically evaluating emerging threats as new information becomes available

C. mplementing security group tags

D. btaining the reputation of known files

عرض الإجابة

اجابة صحيحة: D

السؤال #4

Refer to the exhibit. Which statement about the transaction log is true?

A. The log does not have a date and time

B. The proxy had the content and did not contact other servers

C. The transaction used TCP destination port 8187

D. The AnalizeSuspectTraffic policy group was applied to the transaction

عرض الإجابة

اجابة صحيحة: D

السؤال #5

What causes authentication failures on a Cisco WSA when LDAP is used for authentication?

A. when the passphrase contains only 5 characters

B. when the passphrase contains characters that are not 7-bit ASCI

C. when the passphrase contains one of following characters ‘@ # $ % ^’

D. when the passphrase contains 50 characters

عرض الإجابة

اجابة صحيحة: B

السؤال #6

What are all of the available options for configuring an exception to blocking for referred content?

A. all embedded/referred and all embedded/referred except

B. selected embedded/referred except, all embedded/referred, and selected embedded/referred

C. selected embedded/referred and all embedded/referred except

D. all embedded/referred, selected embedded/referred, and all embedded/referred except

عرض الإجابة

اجابة صحيحة: D

السؤال #7

By default, which two pieces of information does the Cisco WSA access log contain? (Choose two.)

A. HTTP Request Code

B. Content Type

C. Client IP Address

D. User Agent

E. Transaction ID

عرض الإجابة

اجابة صحيحة: AC

السؤال #8

Which two features can be used with an upstream and downstream Cisco WSA web proxy to have the upstream WSA identify users by their client IP address?(Choose two.)

A. -Forwarded-For

B. igh availability

C. eb cache

D. ia

E. P spoofing

عرض الإجابة

اجابة صحيحة: AD

السؤال #9

Which statement about identification profile default settings on the Cisco WSA is true?

A. dentification profiles do not require authentication

B. uest identification profile should be processed first

C. dentification profiles can include only one user group

D. syncOS processes identification profiles alphabetically

عرض الإجابة

اجابة صحيحة: A

السؤال #10

Which two benefits does AMP provide compared to the other scanning engines on the Cisco WSA? (Choose two.)

A. rotection against malware

B. rotection against zero-day attacks

C. rotection against spam

D. rotection against viruses

E. rotection against targeted file-based attacks

عرض الإجابة

اجابة صحيحة: BD

السؤال #11

Which behavior is seen while the policy trace tool is used to troubleshoot a Cisco WSA?

A. AExternal DLP polices are evaluated by the tool

B. BA real client request is processed and an EUN page is displayed

C. CSOCKS policies are evaluated by the tool

D. DThe web proxy does not record the policy trace test requests in the access log when the tool is in use

عرض الإجابة

اجابة صحيحة: D

السؤال #12

What is a benefit of integrating Cisco Cognitive Threat Analytics with a Cisco WSA?

A. It adds additional information to the Cisco WSA reports

B. It adds additional malware protection to the Cisco WSA

C. It provides the ability to use artificial intelligence to block viruses

D. It reduces time to identify threats in the network

عرض الإجابة

اجابة صحيحة: B

السؤال #13

Which two features can be used with an upstream and downstream Cisco WSA web proxy to have the upstream WSA identify users by their client IP address? (Choose two.)

A. X-Forwarded-For

B. high availability

C. web cache

D. via

E. IP spoofing

عرض الإجابة

اجابة صحيحة: AD

السؤال #14

Which action is a valid default for the Global Access Policy in the Application Visibility Control engine on the Cisco WSA?

A. bandwidth limit

B. permit

C. restrict

D. monitor

عرض الإجابة

اجابة صحيحة: D

السؤال #15

What causes authentication failures on a Cisco WSA when LDAP is used for authentication?

A. when the passphrase contains only 5 characters

B. when the passphrase contains characters that are not 7-bit ASCI

C. when the passphrase contains one of following characters ‘@ # $ % ^’

D. when the passphrase contains 50 characters

عرض الإجابة

اجابة صحيحة: B

السؤال #16

Which statement about Cisco Advanced Web Security Reporting integration is true?

A. AWSR uses IP addresses to differentiate Cisco WSA deployments

B. AWSR does not require a license to index data

C. AWSR can remove log files after they are indexed

D. AWSR installation is CLI-based on Windows and Red Hat Linux systems

عرض الإجابة

اجابة صحيحة: D

السؤال #17

When a Cisco WSA is installed with default settings, which port is assigned to the web proxy if theM1 port is used exclusively for management?

A. 1

B. 2

C. 2

D. 1

عرض الإجابة

اجابة صحيحة: D

السؤال #18

What causes authentication failures on a Cisco WSA when LDAP is used for authentication?

A. when the passphrase contains only 5 characters

B. when the passphrase contains characters that are not 7-bit ASCI

C. when the passphrase contains one of following characters ‘@ # $ % ^’

D. when the passphrase contains 50 characters

عرض الإجابة

اجابة صحيحة: B

السؤال #19

Refer to the exhibit. Which command displays this output?

A. rep

B. ogconfig

C. ollovernow

D. ail

عرض الإجابة

اجابة صحيحة: A

السؤال #20

Which information within Cisco Advanced Web Security Reporting is used to generate a report that lists visited domains?

A. RL categories

B. eb reputation

C. ebsites

D. pplication visibility

عرض الإجابة

اجابة صحيحة: A

السؤال #21

Refer to the exhibit. Which statement about the transaction log is true?

A. The log does not have a date and time

B. The proxy had the content and did not contact other servers

C. The transaction used TCP destination port 8187

D. The AnalizeSuspectTraffic policy group was applied to the transaction

عرض الإجابة

اجابة صحيحة: D

السؤال #22

Refer to the exhibit.Which command displays this output?

A. grep

B. logconfig

C. rollovernow

D. tail

عرض الإجابة

اجابة صحيحة: A

السؤال #23

What is the function of a PAC file on a Cisco WSA?

A. AThe file allows redirection of web traffic to a specific proxy server

B. BThe file is mandatory for a transparent proxy to redirect user traffic

C. CThe file provides instructions about which URL categories are permitted

D. DThe file is mandatory for an explicit proxy to forward user traffic

عرض الإجابة

اجابة صحيحة: A

السؤال #24

By default, which two pieces of information does the Cisco WSA access log contain? (Choose two.)

A. TTP Request Code

B. ontent Type

C. lient IP Address

D. ser Agent

E. ransaction ID

عرض الإجابة

اجابة صحيحة: AC

السؤال #25

Which two parameters are mandatory to control access to websites with proxy authentication on aCisco WSA? (Choose two.)

A. xternal Authentication

B. dentity Enabled Authentication

C. ransparent User Identification

D. redential Encryption

E. uthentication Realm

عرض الإجابة

اجابة صحيحة: DE

السؤال #26

Which action is a valid default for the Global Access Policy in the Application Visibility Control engine on the Cisco WSA?

A. andwidth limit

B. ermit

C. estrict

D. onitor

عرض الإجابة

اجابة صحيحة: D

السؤال #27

Refer to the exhibit. Which statement about the transaction log is true?

A. The log does not have a date and time

B. The proxy had the content and did not contact other servers

C. The transaction used TCP destination port 8187

D. The AnalizeSuspectTraffic policy group was applied to the transaction

عرض الإجابة

اجابة صحيحة: D

السؤال #28

What is needed to enable an HTTPS proxy?

A. self-signed server certificate

B. trusted third-party CA signed root certificate

C. self-signed CSR

D. self-signed root certificate

عرض الإجابة

اجابة صحيحة: C

السؤال #29

Which configuration mode does the Cisco WSA use to create an Active Directory realm for Kerberos authentication?

A. orward

B. onnector

C. ransparent

D. tandard

عرض الإجابة

اجابة صحيحة: D

السؤال #30

Which two features on the Cisco WSA help prevent outbound data loss for HTTP or FTP traffic? (Choose two.)

A. eb reputation filters

B. dvanced Malware Protection

C. hird-party DLP integration

D. ata security filters

E. OCKS proxy

عرض الإجابة

اجابة صحيحة: CD

السؤال #31

Refer to the exhibit.Which statement about the transaction log is true?

A. The log does not have a date and time

B. The proxy had the content and did not contact other servers

C. The transaction used TCP destination port 8187

D. The AnalizeSuspectTraffic policy group was applied to the transaction

عرض الإجابة

اجابة صحيحة: D

السؤال #32

You are troubleshooting the proxy connections going through a Cisco WSA. Which CLI tool do you use to monitor a log file in real time?

A. ail

B. slookup

C. ig

D. rep

عرض الإجابة

اجابة صحيحة: A

السؤال #33

Which key is needed to pair a Cisco WSA and Cisco ScanCenter for CTA?

A. public SSH key that the Cisco WSA generates

B. public SSH key that Cisco ScanCenter generates

C. private SSH key that Cisco ScanCenter generates

D. private SSH key that the Cisco WSA generates

عرض الإجابة

اجابة صحيحة: A

السؤال #34

Which two sources provide data to Cisco Advanced Web Security Reporting to create dashboards?(Choosetwo.)

A. isco WSA devices

B. isco ISE

C. isco ASAv

D. isco Security MARS

E. isco Cloud Web Security gateways

عرض الإجابة

اجابة صحيحة: AE

السؤال #35

Which report helps administrators identify users generating the most web traffic?

A. NS Cache Report

B. ertificate Report

C. AID Report

D. op Users Report

عرض الإجابة

اجابة صحيحة: D

السؤال #36

What are all of the available options for configuring an exception to blocking for referred content?

A. ll embedded/referred and all embedded/referred except

B. elected embedded/referred except, all embedded/referred, and selected embedded/referred

C. elected embedded/referred and all embedded/referred except

D. ll embedded/referred, selected embedded/referred, and all embedded/referred except

عرض الإجابة

اجابة صحيحة: D

السؤال #37

Which two features can be used with an upstream and downstream Cisco WSA web proxy to have the upstream WSA identify users by their client IP address? (Choose two.)

A. X - Forwarded - For

B. high availability

C. web cache

D. via

E. IP spoofing

عرض الإجابة

اجابة صحيحة: AD

السؤال #38

Which response code in the access logs indicates that a transaction was blocked due to policy?

A. CP_DENIED/407

B. CP_DENIED/401

C. CP_DENIED/403

D. CP_DENIED/307

عرض الإجابة

اجابة صحيحة: A

السؤال #39

Which two parameters are mandatory to control access to websites with proxy authentication on a Cisco WSA? (Choose two.)

A. AExternal Authentication

B. BIdentity Enabled Authentication

C. CTransparent User Identification

D. DCredential Encryption

E. EAuthentication Realm

عرض الإجابة

اجابة صحيحة: DE

السؤال #40

Which two features can be used with an upstream and downstream Cisco WSA web proxy to have the upstream WSA identify users by their client IP address?(Choose two.)

A. X-Forwarded-For

B. high availability

C. web cache

D. via

E. IP spoofing

عرض الإجابة

اجابة صحيحة: AD

السؤال #41

Which configuration option is suitable for explicit mode deployment?

A. AC

B. CCP

C. TD

D. BR

عرض الإجابة

اجابة صحيحة: A

السؤال #42

A network engineer configures a Cisco Secure Web Appliance in explicit forward mode as a web proxy for endpoints. Which action must be taken next to ensure that HTTP and HTTPS browser traffic from the endpoints traverses the proxy?

A. onfigure each endpoint to use the Secure Web Appliance proxy as a gateway

B. reate a PAC file and host the file on each endpoint and Secure Web Appliance proxy

C. reate a DNS entry on each endpoint that references the Secure Web Appliance proxy

D. enerate an SSL certificate and upload the certificate to the Secure Web Appliance proxy

عرض الإجابة

اجابة صحيحة: B

السؤال #43

What causes authentication failures on a Cisco WSA when LDAP is used for authentication?

A. when the passphrase contains only 5 characters

B. when the passphrase contains characters that are not 7-bit ASCI

C. when the passphrase contains one of following characters ‘@ # $ % ^’

D. when the passphrase contains 50 characters

عرض الإجابة

اجابة صحيحة: B

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان

View The Updated 300-725 Exam Questions

عرض الإجابات بعد التقديم

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع! احصل الان

View The Updated 300-725 Exam Questions

عرض الإجابات بعد التقديم

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان