Cisco 300-725 Online Practice Questions and Exam Preparation

Cisco 300-725 Online Questions & Answers

• Question 31:

  Which two caching modes are available in the Cisco WSA? (Choose two.)

  A. active cache
  B. all cache
  C. aggressive cache
  D. safe cache
  E. no cache
  C. aggressive cache
  D. safe cache

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-5/user_guide/b_WSA_UserGuide_11_5_1/b_WSA_UserGuide_11_5_1_chapter_0100.html#task_1214899

• Question 32:

  Which method is used by AMP against zero-day and targeted file-based attacks?

  A. analyzing behavior of all files that are not yet known to the reputation service
  B. periodically evaluating emerging threats as new information becomes available
  C. implementing security group tags
  D. obtaining the reputation of known files
  D. obtaining the reputation of known files

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/solutions/collateral/enterprise-networks/advanced-malware-protection/solution-overview-c22-734228.html

• Question 33:

  Which action is a valid default for the Global Access Policy in the Application Visibility Control engine on the Cisco WSA?

  A. bandwidth limit
  B. permit
  C. restrict
  D. monitor
  D. monitor

  ---

  Explanation/Reference:

  Reference: https://hrouhani.org/cisco-web-security-appliance-ironport/

• Question 34:

  Which two log types does the Cisco WSA provide to troubleshoot Cisco data security and external data loss prevention policies? (Choose two.)

  A. upload data
  B. data security
  C. default proxy
  D. data access
  E. external data
  C. default proxy
  E. external data

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-0/user_guide/b_WSA_UserGuide/b_WSA_UserGuide_chapter_010011.html

• Question 35:

  Which response code in the access logs indicates that a transaction was blocked due to policy?

  A. TCP_DENIED/407
  B. TCP_DENIED/401
  C. TCP_DENIED/403
  D. TCP_DENIED/307
  A. TCP_DENIED/407

  ---

  Explanation/Reference:

  Reference: https://docuri.com/download/instructions_59a8d562f581719e12ad43fe_pdf

• Question 36:

  Which configuration mode does the Cisco WSA use to create an Active Directory realm for Kerberos authentication?

  A. Forward
  B. Connector
  C. Transparent
  D. Standard
  D. Standard

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-0/user_guide/b_WSA_UserGuide/b_WSA_UserGuide_chapter_01001.html#con_1406137

• Question 37:

  

  Refer to the exhibit. Which command displays this output?

  A. grep
  B. logconfig
  C. rollovernow
  D. tail
  A. grep

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/support/docs/security/web-security-appliance/117938-configure-wsa-00.html

• Question 38:

  Which two sources provide data to Cisco Advanced Web Security Reporting to create dashboards? (Choose two.)

  A. Cisco WSA devices
  B. Cisco ISE
  C. Cisco ASAv
  D. Cisco Security MARS
  E. Cisco Cloud Web Security gateways
  A. Cisco WSA devices
  E. Cisco Cloud Web Security gateways

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/dam/en/us/td/docs/security/wsa/Advanced_Reporting/WSA_Advanced_Reporting_6/Advanced_Web_Security_Reporting_6_1.pdf

• Question 39:

  What is required on the Cisco WSA when an AMP file reputation server private cloud is configured?

  A. private key from the server to encrypt messages
  B. private key to decrypt messages
  C. public and private keys from the server
  D. public key from the server
  D. public key from the server

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-0/user_guide/b_WSA_UserGuide/b_WSA_UserGuide_chapter_010001.html

• Question 40:

  DRAG DROP

  Drag and drop the access policy options from the left onto the correct descriptions on the right.

  Select and Place:

  

  

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-0/user_guide/b_WSA_UserGuide/b_WSA_UserGuide_chapter_01101.pdf (10)