Cisco CCNP 300-725 Questions & Answers

• Question 1:

  When an access policy is created, what is the default option for the Application Settings?

  A. Use Global Policy Applications Settings

  B. Define the Applications Custom Setting

  C. Set all applications to Block

  D. Set all applications to Monitor

  Correct Answer: A

  Reference: https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-7/user_guide/b_WSA_UserGuide_11_7/b_WSA_UserGuide_11_7_chapter_01111.html

• Question 2:

  What is the primary benefit of using Cisco Advanced Web Security Reporting?

  A. ability to see the malicious activity of a user

  B. L4TM report with client-malware risk

  C. centralized and granular reporting

  D. access to a day report with historical data

  Correct Answer: B

  Reference: https://www.cisco.com/c/en/us/products/collateral/security/web-security-appliance/datasheet_c78-729104.html

• Question 3:

  DRAG DROP

  Drag and drop the Cisco WSA access policy elements from the left into the order in which they are processed on the right.

  Select and Place:

  

  Correct Answer:

  

• Question 4:

  DRAG DROP

  Drag and drop the access policy options from the left onto the correct descriptions on the right.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-0/user_guide/b_WSA_UserGuide/b_WSA_UserGuide_chapter_01101.pdf (10)

• Question 5:

  DRAG DROP

  Drag and drop the properties from the left onto the correct advanced web proxy setting descriptions on the right.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-0/user_guide/b_WSA_UserGuide/b_WSA_UserGuide_chapter_0100.html

• Question 6:

  DRAG DROP

  Drag and drop the actions from the left into the correct order on the right in which they occur as an HTTPS session passes through the Cisco WSA.

  Select and Place:

  

  Correct Answer:

  

• Question 7:

  DRAG DROP

  Drag and drop the Cisco WSA methods from the left onto the correct deployment modes on the right.

  Select and Place:

  

  Correct Answer:

  

  You could use an explicit setting (browser config/PAC/WPAD) or transparent (WCCP/PBR) to point to the first proxy and then the first proxy will route based on category to one of the two upstream proxies based on your policy configuration. Reference: https://community.cisco.com/t5/web-security/route-to-wsa-based-on-destination/td-p/2491179

• Question 8:

  What is a benefit of integrating Cisco WSA with TrustSec in ISE?

  A. The policy trace tool can be used to match access policies using specific SGT

  B. Traffic of authenticated users who use 802.1x can be tagged with SGT to identification profiles in a Cisco WSA

  C. ISE can block authentication for users who generate multiple sessions using suspect TCP ports

  D. Users in a specific SGT can be denied access to certain social websites.

  Correct Answer: D

  Reference: https://www.cisco.com/c/en/us/td/docs/security/ise/1-3/ISE-WSAIntegrationDoc/b_ISE-WSAIntegration.html

• Question 9:

  Which port is configured in a browser to use the Cisco WSA web proxy with default settings?

  A. 8080

  B. 8443

  C. 8021

  D. 3128

  Correct Answer: D

  Reference: https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/Aug2013/CVD-WebSecurityUsingCiscoWSADesignGuide-AUG13.pdf (16)

• Question 10:

  Which type of certificate must be installed on a Cisco WSA for HTTPS inspection?

  A. server

  B. client

  C. root

  D. wildcard

  Correct Answer: C

  Reference: https://www.cisco.com/c/en/us/support/docs/security/web-security-appliance/117792-technote-wsa-00.html