Cisco CICSP Online Practice Questions and Exam Preparation

Cisco CICSP Online Questions & Answers

• Question 31:

  For WSA SaaS Access Control, the Identity Provider is:

  A. Integrated into the WSA.
  B. Integrated into the Authentication Server.
  C. Deployed by the SaaS service provider.
  D. An ICAP server that the WSA is configured to communicate with.
  A. Integrated into the WSA.

• Question 32:

  Which of the following is true about Outbound Malware Scanning?

  A. It has its own policy table.
  B. It is configured as part of IronPort Data Security.
  C. It is configured as part of Access Policies.
  D. It only has global configuration
  C. It is configured as part of Access Policies.

• Question 33:

  Which of the following file characteristics CANNOT be used in the Cisco IronPort Data Security policies?

  A. File name
  B. File size
  C. File type
  D. File age
  D. File age

• Question 34:

  In the Setup Wizard, the default action to take when L4TM detects phone-home activity is _________.

  block

• Question 35:

  You can view cache hit rates by using the _________CLI command.

  webcache

• Question 36:

  Why does L4TM require T1 to be in promiscuous mode?

  A. To transmit TCP resets packets
  B. To process traffic not intended for its MAC address
  C. To receive Ethernet broadcasts
  D. To bind with other promiscuous mode ports
  B. To process traffic not intended for its MAC address

• Question 37:

  What is the native FTP proxy control port number on the WSA, if the WSA is in explicit forward mode?

  TCP 8021

• Question 38:

  ________Access Control provides Day zero revocation of access to third party sites such as Salesforce.

  SaaS

• Question 39:

  What is the S-Series Proxy Bypass List?

  A. A list of clients and destinations that will bypass the proxy in transparent mode
  B. A list of clients and destinations that will bypass the proxy in explicit forward mode
  C. A list of proxy servers to be bypassed
  D. A list of user agents exempt from authentication
  A. A list of clients and destinations that will bypass the proxy in transparent mode

• Question 40:

  Which of the following is FALSE?

  A. Custom URL Categories cannot contain IP addresses.
  B. Custom URL Categories can use regular expressions.
  C. Custom URL Categories cannot override pre-defined URL categories.
  D. Custom URL Categories can contain domain names.
  A. Custom URL Categories cannot contain IP addresses.