Real 300-725 dumps Accurate Questions and Answers with Free and Fast Updates
Real 300-725 Quesions Pass Certification Exams Easily
NEW QUESTION # 21
By default, which two pieces of information does the Cisco WSA access log contain? (Choose two.)
- A. Client IP Address
- B. HTTP Request Code
- C. User Agent
- D. Content Type
- E. Transaction ID
Answer: A,B
NEW QUESTION # 22
Which two configuration options can be configured when invalid certificates are processed with the HTTPS proxy on WSA enabled? (Choose two.)
- A. block
- B. redirect
- C. drop
- D. allow
- E. monitor
Answer: C,E
NEW QUESTION # 23
Which statement about configuring an identification profile for machine authentication is true?
- A. Identification profile machine ID is supported locally, but the Cisco WSA does not support machine ID authentication
- B. Cloud Web Security Connector mode with an active directory enabled supports machine authentication
- C. If an Active Directory realm is used, identification can be performed for an authenticated user or IP address but not for a machine ID
- D. Cloud Web Security with Kerberos enabled supports machine authentication
Answer: D
NEW QUESTION # 24
What must be configured to require users to click through an acceptance page before they are allowed to go to the Internet through the Cisco WSA?
- A. Enable End-User Acknowledgement Page and set to Required in Identification Profiles
- B. Enable End-User URL Filtering Warning Page and set to Required in Access Policies
- C. Enable End-User Acknowledgement Page and set to Required in Access Policies
- D. Enable End -User URL Filtering Warning Page and set to Required in Identification Profiles
Answer: C
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-0/user_guide/b_WSA_UserGuide/ b_WSA_UserGuide_chapter_010100.html
NEW QUESTION # 25
Drag and drop the Cisco WSA access policy elements from the left into the order in which they are processed on the right.
Answer:
Explanation:
NEW QUESTION # 26
Which statement about Cisco Advanced Web Security Reporting integration is true?
- A. AWSR can remove log files after they are indexed
- B. AWSR installation is CLI-based on Windows and Red Hat Linux systems
- C. AWSR uses IP addresses to differentiate Cisco WSA deployments
- D. AWSR does not require a license to index data
Answer: B
NEW QUESTION # 27
Which information in the HTTP request is used to determine if it is subject to the referrer exceptions feature in the Cisco WSA?
- A. protocol
- B. payload
- C. header
- D. version
Answer: C
Explanation:
Explanation
Requests for embedded content usually include the address of the site from which the request originated (this is known as the "referer" field in the request's HTTP header). This header information is used to determine categorization of the referred content.
Reference https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-0/user_guide/b_WSA_UserGuide/b_WSA_UserGuide_chapter_01100.html
NEW QUESTION # 28
Which two configuration options are available on a Cisco WSA within a decryption policy? (Choose two.)
- A. Warn
- B. Allow
- C. Decrypt
- D. Block
- E. Pass Through
Answer: C,E
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-7/user_guide/ b_WSA_UserGuide_11_7/b_WSA_UserGuide_11_7_chapter_01011.html
NEW QUESTION # 29
Which two caching modes are available in the Cisco WSA? (Choose two.)
- A. safe cache
- B. active cache
- C. aggressive cache
- D. no cache
- E. all cache
Answer: A,C
NEW QUESTION # 30
Drag and drop the actions from the left into the correct order on the right in which they occur as an HTTPS session passes through the Cisco WSA.
Answer:
Explanation:
NEW QUESTION # 31
Which IP address and port are used by default to run the system setup wizard?
- A. https://192.168.42.10:8443
- B. http://192.168.42.42:80
- C. https://192.168.42.42:8080
- D. http://192.168.43.42:8080
Answer: C
NEW QUESTION # 32
An administrator wants to restrict file uploads to Facebook using the AVC feature.
Under which two actions must the administrator apply this restriction to an access policy? (Choose two.)
- A. Monitor Facebook Application
- B. Monitor Social Networking
- C. Monitor Facebook Photos and Videos
- D. Monitor Facebook Messages and Chat
- E. Monitor Facebook General
Answer: C,E
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/products/collateral/security/web-security-appliance/datasheet- c78-741272.html
NEW QUESTION # 33
What is needed to enable an HTTPS proxy?
- A. self-signed server certificate
- B. self-signed root certificate
- C. self-signed CSR
- D. trusted third-party CA signed root certificate
Answer: C
Explanation:
Explanation/Reference: https://community.cisco.com/t5/web-security/cisco-wsa-https-proxy-certificate-issue/td- p/3019392
NEW QUESTION # 34
Which two modes of operation does the Cisco WSA provide? (Choose two.)
- A. standard
- B. proxy
- C. explicit
- D. transparent
- E. connector
Answer: C,D
NEW QUESTION # 35
Which two log types does the Cisco WSA provide to troubleshoot Cisco data security and external data loss prevention policies? (Choose two.)
- A. data access
- B. upload data
- C. default proxy
- D. external data
- E. data security
Answer: C,D
Explanation:
Explanation
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-0/user_guide/b_WSA_UserGuide/ b_WSA_UserGuide_chapter_010011.html
NEW QUESTION # 36
Which statement about identification profile default settings on the Cisco WSA is true?
- A. AsyncOS processes identification profiles alphabetically
- B. Guest identification profile should be processed first
- C. Identification profiles do not require authentication
- D. Identification profiles can include only one user group
Answer: C
NEW QUESTION # 37
Which statement about the SOCKS proxy is true?
- A. SOCKS operates on TCP port 80, 443, and 8334
- B. SOCKS is a general purpose proxy
- C. SOCKS is used for UDP traffic only
- D. SOCKS is used only for traffic that is redirected through a firewall
Answer: B
NEW QUESTION # 38
When an access policy is created, what is the default option for the Application Settings?
- A. Set all applications to Block
- B. Set all applications to Monitor
- C. Use Global Policy Applications Settings
- D. Define the Applications Custom Setting
Answer: D
NEW QUESTION # 39
What causes authentication failures on a Cisco WSA when LDAP is used for authentication?
- A. when the passphrase contains one of following characters '@ # $ % ^'
- B. when the passphrase contains characters that are not 7-bit ASCI
- C. when the passphrase contains only 5 characters
- D. when the passphrase contains 50 characters
Answer: B
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-0/user_guide/b_WSA_UserGuide/ b_WSA_UserGuide_appendix_011001.html
NEW QUESTION # 40
Which two features can be used with an upstream and downstream Cisco WSA web proxy to have the upstream WSA identify users by their client IP address? (Choose two.)
- A. web cache
- B. via
- C. IP spoofing
- D. high availability
- E. X-Forwarded-For
Answer: B,E
NEW QUESTION # 41
What must be configured first when creating an access policy that matches the Active Directory group?
- A. authorized groups specification
- B. authentication realm
- C. FQDN specification
- D. authentication, authorization, and accounting of groups
Answer: B
NEW QUESTION # 42
......
Once you have completed the course, you will be ready to take the final 300-725 test. So, these are the areas where your competency should show:
- Performing administration in addition to troubleshooting.
- Thorough understanding of Cisco WSA;
- Understanding and using differentiated policies for traffic access as well as identification profiles;
- Defending against malware;
- Enforcing acceptable control settings for use;
- Familiarity with decryption policies for controlling HTTPS traffic;
- Thoroughly understanding the different policies for traffic access and identification;
- Describing data security as well as the prevention of data from loss;
- Using authentication;
Once you are sure of having fulfilled the above objectives, then you can deem yourself ready to sit for the real exam. In all, this class is very comprehensive and covers almost all the domains to be tested in 300-725 evaluation.
300-725 Dumps are Available for Instant Access: https://www.testpdf.com/300-725-exam-braindumps.html
Practice with these 300-725 dumps Certification Sample Questions: https://drive.google.com/open?id=1wYVH--AZvoA0uoMTOEoqh7W7TiVe3kyt
