300-725 Practice Exam — Free Cisco Certification Prep

Join Us Among the Stars

Sign Up & unlock 100% of Exam Questions

Log in / Sign up

No Strings Attached!

60Practice Questions

3Study Modes

Free

TopicSort

Question 1

Reporting and Tracking Web Transactions

Which two log types does the Cisco WSA provide to troubleshoot Cisco data security and external data loss prevention policies? (Choose two.)

A upload data
B data security
C default proxy
D data access
E external data

Question 2

Reporting and Tracking Web Transactions

Question 3

Configuration

Question 4

Differentiated Traffic Access Policies and Identification Profiles

Question 5

Reporting and Tracking Web Transactions

Question 6

Proxy Services

Question 7

Reporting and Tracking Web Transactions

Question 8

Configuration

Question 9

Decryption Policies to Control HTTPS Traffic

Question 10

Differentiated Traffic Access Policies and Identification Profiles

Question 11

Malware Defense

Question 12

Acceptable Use Control

Question 13

Malware Defense

Question 14

Differentiated Traffic Access Policies and Identification Profiles

Question 15

Malware Defense

Question 16

Proxy Services

Question 17

Malware Defense

Question 18

Malware Defense

Question 19

Reporting and Tracking Web Transactions

Question 20

Configuration

Question 21

Configuration

Question 22

Cisco WSA Features

Question 23

Authentication

Question 24

Differentiated Traffic Access Policies and Identification Profiles

That's the end of the Preview

This exam has 60 community-verified practice questions. Create a free account to access all questions, comments, and explanations.

Topics covered:

Cisco WSA FeaturesConfigurationProxy ServicesAuthenticationDecryption Policies to Control HTTPS TrafficDifferentiated Traffic Access Policies and Identification ProfilesAcceptable Use ControlMalware DefenseReporting and Tracking Web Transactions

Log In / Sign Up

Page 1 of 3 • Questions 1-25 of 60

1 2 3

→

Know a question that should be here? Contribute to this exam

What is the primary benefit of using Cisco Advanced Web Security Reporting?

A ability to see the malicious activity of a user
B L4TM report with client-malware risk
C centralized and granular reporting
D access to a day report with historical data

When an access policy is created, what is the default option for the Application Settings?

A Use Global Policy Applications Settings
B Define the Applications Custom Setting
C Set all applications to Block
D Set all applications to Monitor

What is a benefit of integrating Cisco WSA with TrustSec in ISE?

A The policy trace tool can be used to match access policies using specific SGT
B Traffic of authenticated users who use 802.1x can be tagged with SGT to identification profiles in a Cisco WSA
C ISE can block authentication for users who generate multiple sessions using suspect TCP ports
D Users in a specific SGT can be denied access to certain social websites.

What is a valid predefined time range when configuring a Web Tracking query?

A year
B minute
C hour
D month

Question 6

Proxy Services

Question 7

Reporting and Tracking Web Transactions

Question 8

Configuration

Question 9

Decryption Policies to Control HTTPS Traffic

Question 10

Differentiated Traffic Access Policies and Identification Profiles

Question 11

Malware Defense

Question 12

Acceptable Use Control

Question 13

Malware Defense

Question 14

Differentiated Traffic Access Policies and Identification Profiles

Question 15

Malware Defense

Question 16

Proxy Services

Question 17

Malware Defense

Question 18

Malware Defense

Question 19

Reporting and Tracking Web Transactions

Question 20

Configuration

Question 21

Configuration

Question 22

Cisco WSA Features

Question 23

Authentication

Question 24

Differentiated Traffic Access Policies and Identification Profiles

Which two parameters are mandatory to control access to websites with proxy authentication on a Cisco WSA? (Choose two.)

A External Authentication
B Identity Enabled Authentication
C Transparent User Identification
D Credential Encryption
E Authentication Realm

Which two types of reports are scheduled on the Cisco WSA to analyze traffic? (Choose two.)

A Layer 3 traffic monitor
B URL categories
C host statistics
D application visibility
E system capacity

What must be configured first when creating an access policy that matches the Active Directory group?

A authentication, authorization, and accounting of groups
B FQDN specification
C authentication realm
D authorized groups specification

DRAG DROP -
Drag and drop the actions from the left into the correct order on the right in which they occur as an HTTPS session passes through the Cisco WSA.
Select and Place:

Question Image

Which statement about configuring an identification profile for machine authentication is true?

A Cloud Web Security Connector mode with an active directory enabled supports machine authentication
B Identification profile machine ID is supported locally, but the Cisco WSA does not support machine ID authentication
C Cloud Web Security with Kerberos enabled supports machine authentication
D If an Active Directory realm is used, identification can be performed for an authenticated user or IP address but not for a machine ID

Which two benefits does AMP provide compared to the other scanning engines on the Cisco WSA? (Choose two.)

A protection against malware
B protection against zero-day attacks
C protection against spam
D protection against viruses
E protection against targeted file-based attacks

Which response code in the access logs indicates that a transaction was blocked due to policy?

A TCP_DENIED/407
B TCP_DENIED/401
C TCP_DENIED/403
D TCP_DENIED/307

What is a benefit of integrating Cisco Cognitive Threat Analytics with a Cisco WSA?

A It adds additional information to the Cisco WSA reports
B It adds additional malware protection to the Cisco WSA
C It provides the ability to use artificial intelligence to block viruses
D It reduces time to identify threats in the network

An administrator wants to restrict file uploads to Facebook using the AVC feature.
Under which two actions must the administrator apply this restriction to an access policy? (Choose two.)

A Monitor Facebook General
B Monitor Social Networking
C Monitor Facebook Photos and Videos
D Monitor Facebook Messages and Chat
E Monitor Facebook Application

How does dynamic content analysis improve URL categorization?

A It analyzes content based on cached destination content
B It adds intelligence to detect categories by analyzing responses
C It can be used as the only URL analysis method
D It analyzes content of categorized URL to tune decisions and correct categorization errors

What is needed to enable an HTTPS proxy?

A self-signed server certificate
B trusted third-party CA signed root certificate
C self-signed CSR
D self-signed root certificate

What is the purpose of using AMP file analysis on a Cisco WSA to continuously evaluate emerging threats?

A to take appropriate action on new files that enter the network
B to remove files from quarantine by stopping their retention period
C to notify you of files that are determined to be threats after they have entered your network
D to send all files downloaded through the Cisco WSA to the AMP cloud

Which method is used by AMP against zero-day and targeted file-based attacks?

A analyzing behavior of all files that are not yet known to the reputation service
B periodically evaluating emerging threats as new information becomes available
C implementing security group tags
D obtaining the reputation of known files

Question Image

Refer to the exhibit. Which command displays this output?

A grep
B logconfig
C rollovernow
D tail

DRAG DROP -
Drag and drop the Cisco WSA access policy elements from the left into the order in which they are processed on the right.
Select and Place:

Question Image

Which IP address and port are used by default to run the system setup wizard?

A http://192.168.42.42:80
B https://192.168.42.42:8080
C https://192.168.42.10:8443
D http://192.168.43.42:8080

DRAG DROP -
Drag and drop the Cisco WSA methods from the left onto the correct deployment modes on the right.
Select and Place:

Question Image

What causes authentication failures on a Cisco WSA when LDAP is used for authentication?

A when the passphrase contains only 5 characters
B when the passphrase contains characters that are not 7-bit ASCI
C when the passphrase contains one of following characters "˜@ # $ % ^'
D when the passphrase contains 50 characters

Which two features can be used with an upstream and downstream Cisco WSA web proxy to have the upstream WSA identify users by their client IP address?
(Choose two.)

A X-Forwarded-For
B high availability
C web cache
D via
E IP spoofing

Join Us Among the Stars

300-725Preview

About the 300-725 Exam

Mode Selection

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

Question 19

Question 20

Question 21

Question 22

Question 23

Question 24

That's the end of the Preview

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

Question 19

Question 20

Question 21

Question 22

Question 23

Question 24