최신 300-725 무료덤프 - Cisco Securing the Web with Cisco Web Security Appliance

문제1

Which type of certificate must be installed on a Cisco WSA for HTTPS inspection?

A. root

B. server

C. client

D. wildcard

정답: A

문제2

What is a benefit of integrating Cisco WSA with TrustSec in ISE?

A. Users in a specific SGT can be denied access to certain social websites.

B. ISE can block authentication for users who generate multiple sessions using suspect TCP ports

C. The policy trace tool can be used to match access policies using specific SGT

D. Traffic of authenticated users who use 802.1x can be tagged with SGT to identification profiles in a Cisco WSA

정답: A

문제3

Which statement about configuring an identification profile for machine authentication is true?

A. Identification profile machine ID is supported locally, but the Cisco WSA does not support machine ID authentication

B. Cloud Web Security Connector mode with an active directory enabled supports machine authentication

C. Cloud Web Security with Kerberos enabled supports machine authentication

D. If an Active Directory realm is used, identification can be performed for an authenticated user or IP address but not for a machine ID

정답: C

문제4

Which action is a valid default for the Global Access Policy in the Application Visibility Control engine on the Cisco WSA?

A. bandwidth limit

B. permit

C. restrict

D. monitor

정답: D

문제5

Which two configuration options can be configured when invalid certificates are processed with the HTTPS proxy on WSA enabled? (Choose two.)

A. allow

B. block

C. redirect

D. drop

E. monitor

정답: D,E

문제6

Which two features can be used with an upstream and downstream Cisco WSA web proxy to have the upstream WSA identify users by their client IP address? (Choose two.)

A. X-Forwarded-For

B. via

C. web cache

D. IP spoofing

E. high availability

정답: A,B

최신 300-725 무료덤프 - Cisco Securing the Web with Cisco Web Security Appliance

우리와 연락하기

유용한 링크

최신 업데이트