300-725 Pre-Exam Practice Tests (Updated 60 Questions) [Q24-Q44]

Rate this post

300-725 Pre-Exam Practice Tests | (Updated 60 Questions)

Valid 300-725 Exam Q&A PDF – One Year Free Update

Proxy Services: As for the next section, the individuals need to show their expertise in the following areas:

Explaining the purposes of the PAC file
Comparing different proxy terms, including upstream proxy versus downstream proxy, and explicit proxy versus transparent proxy
Explaining SOCKS proxy-services and SOCKS protocol

NO.24 How does the Cisco WSA choose which scanning engine verdict to use when there is more than one verdict?

based on the least restrictive verdict

based on the most restrictive verdict

based on the first verdict returned

based on the last verdict returned

NO.25 What is needed to enable an HTTPS proxy?

self-signed server certificate

trusted third-party CA signed root certificate

self-signed CSR

self-signed root certificate

Explanation/Reference: https://community.cisco.com/t5/web-security/cisco-wsa-https-proxy-certificate-issue/td- p/3019392

NO.26 Which two types of reports are scheduled on the Cisco WSA to analyze traffic? (Choose two.)

Layer 3 traffic monitor

URL categories

host statistics

application visibility

system capacity

NO.27 When a Cisco WSA is installed with default settings, which port is assigned to the web proxy if the M1 port is used exclusively for management?

Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-5/user_guide/ b_WSA_UserGuide_11_5_1/b_WSA_UserGuide_11_5_1_chapter_01.html

NO.28 Which type of certificate must be installed on a Cisco WSA for HTTPS inspection?

server

client

root

wildcard

Explanation/Reference: https://www.cisco.com/c/en/us/support/docs/security/web-security-appliance/117792-technote- wsa-00.html

NO.29 When an access policy is created, what is the default option for the Application Settings?

Use Global Policy Applications Settings

Define the Applications Custom Setting

Set all applications to Block

Set all applications to Monitor

NO.30 What must be configured first when creating an access policy that matches the Active Directory group?

authentication, authorization, and accounting of groups

FQDN specification

authentication realm

authorized groups specification

Explanation/Reference: https://www.cisco.com/c/en/us/support/docs/security/web-security-appliance/118005-configure- ntlm-00.html

NO.31 Which statement about identification profile default settings on the Cisco WSA is true?

Identification profiles do not require authentication

Guest identification profile should be processed first

Identification profiles can include only one user group

AsyncOS processes identification profiles alphabetically

NO.32 Which action is a valid default for the Global Access Policy in the Application Visibility Control engine on the Cisco WSA?

bandwidth limit

permit

restrict

monitor

NO.33 Which method is used by AMP against zero-day and targeted file-based attacks?

analyzing behavior of all files that are not yet known to the reputation service

periodically evaluating emerging threats as new information becomes available

implementing security group tags

obtaining the reputation of known files

NO.34 Which type of FTP proxy does the Cisco WSA support?

non-native FTP

FTP over UDP tunneling

FTP over HTTP

hybrid FTP

NO.35 Which two modes of operation does the Cisco WSA provide? (Choose two.)

connector

proxy

transparent

standard

explicit

NO.36 Which statement about configuring an identification profile for machine authentication is true?

Cloud Web Security Connector mode with an active directory enabled supports machine authentication

Identification profile machine ID is supported locally, but the Cisco WSA does not support machine ID authentication

Cloud Web Security with Kerberos enabled supports machine authentication

If an Active Directory realm is used, identification can be performed for an authenticated user or IP address but not for a machine ID

NO.37 Which configuration mode does the Cisco WSA use to create an Active Directory realm for Kerberos authentication?

Forward

Connector

Transparent

Standard

NO.38 How does dynamic content analysis improve URL categorization?

It analyzes content based on cached destination content

It adds intelligence to detect categories by analyzing responses

It can be used as the only URL analysis method

It analyzes content of categorized URL to tune decisions and correct categorization errors

NO.39 Which two configuration options can be configured when invalid certificates are processed with the HTTPS proxy on WSA enabled? (Choose two.)

allow

monitor

drop

block

redirect

NO.40 Which response code in the access logs indicates that a transaction was blocked due to policy?

TCP_DENIED/407

TCP_DENIED/401

TCP_DENIED/403

TCP_DENIED/307

NO.41 Which two features can be used with an upstream and downstream Cisco WSA web proxy to have the upstream WSA identify users by their client IP address? (Choose two.)

X-Forwarded-For

high availability

web cache

via

IP spoofing

NO.42 What is the purpose of using AMP file analysis on a Cisco WSA to continuously evaluate emerging threats?

to take appropriate action on new files that enter the network

to remove files from quarantine by stopping their retention period

to notify you of files that are determined to be threats after they have entered your network

to send all files downloaded through the Cisco WSA to the AMP cloud

NO.43 What is a benefit of integrating Cisco Cognitive Threat Analytics with a Cisco WSA?

It adds additional information to the Cisco WSA reports

It adds additional malware protection to the Cisco WSA

It provides the ability to use artificial intelligence to block viruses

It reduces time to identify threats in the network

NO.44 Which information within Cisco Advanced Web Security Reporting is used to generate a report that lists visited domains?

URL categories

web reputation

websites

application visibility

Loading …

Securing the Web with Cisco Web Security Appliance Free Update Certification Sample Questions: https://www.trainingquiz.com/300-725-practice-quiz.html