Securing the Web with Cisco Web Security Appliance

Question 1

What is a disadvantage of using LDAP as an authentication method for transparent proxy?

A. requires cookies to be disabled

B. single sign-on is not supported

C. cached authentication credentials

D. only works for HTTPS requests

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 2

A network engineer configures a Cisco Secure Web Appliance in explicit forward mode as a web proxy for endpoints. Which action must be taken next to ensure that HTTP and HTTPS browser traffic from the endpoints traverses the proxy?

A. Create a PAC file and host the file on each endpoint and Secure Web Appliance proxy.

B. Generate an SSL certificate and upload the certificate to the Secure Web Appliance proxy.

C. Configure each endpoint to use the Secure Web Appliance proxy as a gateway.

D. Create a DNS entry on each endpoint that references the Secure Web Appliance proxy.

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 3

What is used to configure WSA as an explicit proxy?

A. WCCP redirection from firewall

B. Auto redirection using PBR from switch

C. Network settings from user browser

D. IP Spoofing from router

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 4

Which description of the Cisco ASA Connector in a Cisco CWS solution is true?

A. securely redirects specified traffic to the CWS cloud for inspection

B. enables the ASA to download information from CWS

C. permits the IP addresses required by CWS in the ASA access policy

D. deploys a VPN connection to the CWS cloud

Correct Answer: A

Question 5

What is the primary benefit of using Cisco Advanced Web Security Reporting?

A. centralized and granular reporting

B. access to a day report with historical data

C. ability to see the malicious activity of a user

D. L4TM report with client-malware risk

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 6

An administrator is installing Cisco AWSR behind a corporate firewall. Reports must be viewable by upper management personnel in other offices who access the server without a VPN. Which TCP port must be permitted on the firewall to allow this communication?

A. 8889

B. 8886

C. 8887

D. 8888

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 7

Which statement about configuring an identification profile for machine authentication is true?

A. Cloud Web Security Connector mode with an active directory enabled supports machine authentication

B. Cloud Web Security with Kerberos enabled supports machine authentication

C. Identification profile machine ID is supported locally, but the Cisco WSA does not support machine ID authentication

D. If an Active Directory realm is used, identification can be performed for an authenticated user or IP address but not for a machine ID

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Cisco Securing the Web with Cisco Web Security Appliance - 300-725 Exam Practice Test

Latest Update

Useful Links

Contact Us