Cisco CCNP 300-725 Questions & Answers

• Question 11:

  Which two log types does the Cisco WSA provide to troubleshoot Cisco data security and external data loss prevention policies? (Choose two.)

  A. upload data

  B. data security

  C. default proxy

  D. data access

  E. external data

  Correct Answer: CE

  Reference: https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-0/user_guide/b_WSA_UserGuide/b_WSA_UserGuide_chapter_010011.html

• Question 12:

  What is the purpose of using AMP file analysis on a Cisco WSA to continuously evaluate emerging threats?

  A. to take appropriate action on new files that enter the network

  B. to remove files from quarantine by stopping their retention period

  C. to notify you of files that are determined to be threats after they have entered your network

  D. to send all files downloaded through the Cisco WSA to the AMP cloud

  Correct Answer: C

  Reference: https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-5/user_guide/b_WSA_UserGuide_11_5_1/b_WSA_UserGuide_11_5_1_chapter_01110.html

• Question 13:

  Which two configuration options can be configured when invalid certificates are processed with the HTTPS proxy on WSA enabled? (Choose two.)

  A. allow

  B. monitor

  C. drop

  D. block

  E. redirect

  Correct Answer: BC

  Reference: https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-7/user_guide/b_WSA_UserGuide_11_7/b_WSA_UserGuide_11_7_chapter_01011.html

• Question 14:

  What is needed to enable an HTTPS proxy?

  A. self-signed server certificate

  B. trusted third-party CA signed root certificate

  C. self-signed CSR

  D. self-signed root certificate

  Correct Answer: C

  Reference: https://community.cisco.com/t5/web-security/cisco-wsa-https-proxy-certificate-issue/td-p/3019392

• Question 15:

  How does dynamic content analysis improve URL categorization?

  A. It analyzes content based on cached destination content

  B. It adds intelligence to detect categories by analyzing responses

  C. It can be used as the only URL analysis method

  D. It analyzes content of categorized URL to tune decisions and correct categorization errors

  Correct Answer: D

  Reference: https://www.cisco.com/c/en/us/support/docs/security/web-security-appliance/118063-qanda-wsa-00.html

• Question 16:

  Which two caching modes are available in the Cisco WSA? (Choose two.)

  A. active cache

  B. all cache

  C. aggressive cache

  D. safe cache

  E. no cache

  Correct Answer: CD

  Reference: https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-5/user_guide/b_WSA_UserGuide_11_5_1/b_WSA_UserGuide_11_5_1_chapter_0100.html#task_1214899

• Question 17:

  An administrator wants to restrict file uploads to Facebook using the AVC feature.

  Under which two actions must the administrator apply this restriction to an access policy? (Choose two.)

  A. Monitor Facebook General

  B. Monitor Social Networking

  C. Monitor Facebook Photos and Videos

  D. Monitor Facebook Messages and Chat

  E. Monitor Facebook Application

  Correct Answer: AC

  Reference: https://www.cisco.com/c/en/us/products/collateral/security/web-security-appliance/datasheet-c78-741272.html

• Question 18:

  What is the default action when a new custom category is created and added to an access policy?

  A. monitor

  B. allow

  C. block

  D. decrypt

  Correct Answer: A

  Reference: https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-7/user_guide/b_WSA_UserGuide_11_7/b_WSA_UserGuide_11_7_chapter_01001.html

• Question 19:

  Which type of FTP proxy does the Cisco WSA support?

  A. non-native FTP

  B. FTP over UDP tunneling

  C. FTP over HTTP

  D. hybrid FTP

  Correct Answer: C

  Reference: https://www.cisco.com/c/en/us/support/docs/security/web-security-appliance/117984-qanda-wsa-00.html

• Question 20:

  What must be configured to require users to click through an acceptance page before they are allowed to go to the Internet through the Cisco WSA?

  A. Enable End-User Acknowledgement Page and set to Required in Identification Profiles

  B. Enable End -User URL Filtering Warning Page and set to Required in Identification Profiles

  C. Enable End-User Acknowledgement Page and set to Required in Access Policies

  D. Enable End-User URL Filtering Warning Page and set to Required in Access Policies

  Correct Answer: C

  Reference: https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-0/user_guide/b_WSA_UserGuide/b_WSA_UserGuide_chapter_010100.html