Cisco CCNP 300-725 Questions & Answers

• Question 51:

  Which behavior is seen while the policy trace tool is used to troubleshoot a Cisco WSA?

  A. External DLP polices are evaluated by the tool

  B. A real client request is processed and an EUN page is displayed

  C. SOCKS policies are evaluated by the tool

  D. The web proxy does not record the policy trace test requests in the access log when the tool is in use

  Correct Answer: D

  Reference: https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-0/user_guide/b_WSA_UserGuide/b_WSA_UserGuide_appendix_011001.html#con_1415277

• Question 52:

  Which method is used by AMP against zero-day and targeted file-based attacks?

  A. analyzing behavior of all files that are not yet known to the reputation service

  B. periodically evaluating emerging threats as new information becomes available

  C. implementing security group tags

  D. obtaining the reputation of known files

  Correct Answer: D

  Reference: https://www.cisco.com/c/en/us/solutions/collateral/enterprise-networks/advanced-malware-protection/solution-overview-c22-734228.html

• Question 53:

  What is a benefit of integrating Cisco Cognitive Threat Analytics with a Cisco WSA?

  A. It adds additional information to the Cisco WSA reports

  B. It adds additional malware protection to the Cisco WSA

  C. It provides the ability to use artificial intelligence to block viruses

  D. It reduces time to identify threats in the network

  Correct Answer: D

  Reference: https://www.ironportstore.com/datasheets/data_sheet_c78-729630.pdf

• Question 54:

  Which key is needed to pair a Cisco WSA and Cisco ScanCenter for CTA?

  A. public SSH key that the Cisco WSA generates

  B. public SSH key that Cisco ScanCenter generates

  C. private SSH key that Cisco ScanCenter generates

  D. private SSH key that the Cisco WSA generates

  Correct Answer: A

  Reference: https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-0/user_guide/b_WSA_UserGuide/b_WSA_UserGuide_chapter_010111.html

• Question 55:

  What is used to configure WSA as an explicit proxy?

  A. IP Spoofing from router

  B. Network settings from user browser

  C. WCCP redirection from firewall

  D. Auto redirection using PBR from switch

  Correct Answer: B

  Reference: https://www.cisco.com/c/en/us/support/docs/security/web-security-appliance/117940-qa-wsa-00.html

• Question 56:

  Which information in the HTTP request is used to determine if it is subject to the referrer exceptions feature in the Cisco WSA?

  A. protocol

  B. version

  C. header

  D. payload

  Correct Answer: C

  Requests for embedded content usually include the address of the site from which the request originated (this is known as the "referer" field in the request's HTTP header). This header information is used to determine categorization of the referred content. Reference https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-0/user_guide/b_WSA_UserGuide/b_WSA_UserGuide_chapter_01100.html

• Question 57:

  Which two configuration options are available on a Cisco WSA within a decryption policy? (Choose two.)

  A. Pass Through

  B. Warn

  C. Decrypt

  D. Allow

  E. Block

  Correct Answer: AC

  Reference: https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-7/user_guide/b_WSA_UserGuide_11_7/b_WSA_UserGuide_11_7_chapter_01011.html

• Question 58:

  

  Refer to the exhibit. Which statement about the transaction log is true?

  A. The log does not have a date and time

  B. The proxy had the content and did not contact other servers

  C. The transaction used TCP destination port 8187

  D. The AnalizeSuspectTraffic policy group was applied to the transaction

  Correct Answer: D

• Question 59:

  Which two features can be used with an upstream and downstream Cisco WSA web proxy to have the upstream WSA identify users by their client IP address? (Choose two.)

  A. X-Forwarded-For

  B. high availability

  C. web cache

  D. via

  E. IP spoofing

  Correct Answer: AD

  Reference: https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-0/user_guide/b_WSA_UserGuide/b_WSA_UserGuide_chapter_0100.html

• Question 60:

  What causes authentication failures on a Cisco WSA when LDAP is used for authentication?

  A. when the passphrase contains only 5 characters

  B. when the passphrase contains characters that are not 7-bit ASCI

  C. when the passphrase contains one of following characters `@ # $ % ^'

  D. when the passphrase contains 50 characters

  Correct Answer: B

  Reference: https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-0/user_guide/b_WSA_UserGuide/b_WSA_UserGuide_appendix_011001.html