Cisco Securing the Web with Cisco Web Security Appliance - 300-725 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

What is the default action when a new custom category is created and added to an access policy?

A. block B. allow C. monitor D. decrypt

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 2

Which two features can be used with an upstream and downstream Cisco WSA web proxy to have the upstream WSA identify users by their client IP address? (Choose two.)

A. high availability B. IP spoofing C. via D. web cache E. X-Forwarded-For

Discussion 0

Correct Answer: C,E Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 3

Which report helps administrators identify users generating the most web traffic?

A. DNS Cache Report B. Certificate Report C. RAID Report D. Top Users Report

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 4

A network engineer configures a Cisco Secure Web Appliance in explicit forward mode as a web proxy for endpoints. Which action must be taken next to ensure that HTTP and HTTPS browser traffic from the endpoints traverses the proxy?

A. Configure each endpoint to use the Secure Web Appliance proxy as a gateway. B. Create a PAC file and host the file on each endpoint and Secure Web Appliance proxy. C. Create a DNS entry on each endpoint that references the Secure Web Appliance proxy. D. Generate an SSL certificate and upload the certificate to the Secure Web Appliance proxy.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 5

When a Cisco WSA is installed with default settings, which port is assigned to the web proxy if the M1 port is used exclusively for management?

A. P1 B. T1 C. P2 D. T2

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 6

You are troubleshooting the proxy connections going through a Cisco WSA. Which CLI tool do you use to monitor a log file in real time?

A. tail B. nslookup C. dig D. grep

Discussion 0

Correct Answer: A Vote an answer

Question 7

Which Cisco Secure Web Appliance component provides malware detection using file reputation?

A. Cisco Talos File Reputation B. URL Category Database C. SNMP Server D. PAC File

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 8

Which two configuration options can be configured when invalid certificates are processed with the HTTPS proxy on WSA enabled? (Choose two.)

A. block B. allow C. redirect D. drop E. monitor

Discussion 0

Correct Answer: D,E Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 9

An administrator has set up a Cisco Secure Web Appliance so users can connect to the appliance's web GUI using non-local accounts. One of the users is able to connect to the GUI, but is unable to make any changes. What must be done to address this issue?

A. Add the non-local account to 'Administrators' AD group as this is needed to make changes on the Cisco Secure Web Appliance GUI. B. Create a local user account on the Cisco Secure Web Appliance as non-local accounts cannot make changes on the Cisco Secure Web Appliance GUI. C. Examine GUI logs to determine the user's username and modify the Cisco Secure Web Appliance settings to provide the appropriate access to the specified username. D. Examine external authentication logs to determine the role the user is assigned and modify the Cisco Secure Web Appliance settings to provide the appropriate access.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 10

A network security engineer wants to search the access logs on a Cisco Secure Web Appliance using the grep command for the time period 17:10:00 on 12/09/2020. Which step must the engineer take to find the data in the access logs for this time period?

A. Convert the date/time to an UNIX timestamp and use that value within the regex. B. Use the value of "\12/09/2020\&\17:10:00\" as the regex. C. Use the value of "^12092020&171000_" as the regex. D. Convert the date/time to a HEX value and use that value within the regex.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).