Download Free Cisco 300-725 Real Exam Questions Download
Latest Cisco 300-725 Real Exam Dumps PDF
NEW QUESTION # 12
When an access policy is created, what is the default option for the Application Settings?
- A. Define the Applications Custom Setting
- B. Use Global Policy Applications Settings
- C. Set all applications to Monitor
- D. Set all applications to Block
Answer: A
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-7/user_guide/ b_WSA_UserGuide_11_7/b_WSA_UserGuide_11_7_chapter_01111.html
NEW QUESTION # 13
What must be configured to require users to click through an acceptance page before they are allowed to go to the Internet through the Cisco WSA?
- A. Enable End-User URL Filtering Warning Page and set to Required in Access Policies
- B. Enable End-User Acknowledgement Page and set to Required in Identification Profiles
- C. Enable End-User Acknowledgement Page and set to Required in Access Policies
- D. Enable End -User URL Filtering Warning Page and set to Required in Identification Profiles
Answer: C
NEW QUESTION # 14
What is the primary benefit of using Cisco Advanced Web Security Reporting?
- A. ability to see the malicious activity of a user
- B. L4TM report with client-malware risk
- C. centralized and granular reporting
- D. access to a day report with historical data
Answer: B
NEW QUESTION # 15
Drag and drop the Cisco WSA methods from the left onto the correct deployment modes on the right.
Answer:
Explanation:
Explanation
You could use an explicit setting (browser config/PAC/WPAD) or transparent (WCCP/PBR) to point to the first proxy and then the first proxy will route based on category to one of the two upstream proxies based on your policy configuration.
NEW QUESTION # 16
Which two configuration options are available on a Cisco WSA within a decryption policy? (Choose two.)
- A. Warn
- B. Decrypt
- C. Allow
- D. Pass Through
- E. Block
Answer: B,D
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-7/user_guide/ b_WSA_UserGuide_11_7/b_WSA_UserGuide_11_7_chapter_01011.html
NEW QUESTION # 17
Which two caches must be cleared on a Cisco WSA to resolve an issue in processing requests? (Choose two.)
- A. logging cache
- B. HTTP cache
- C. authentication cache
- D. DNS cache
- E. application cache
Answer: C,D
NEW QUESTION # 18
A user browses to a company website that is categorized as "Business and Industry" and contains a Facebook post. The user cannot see the Facebook post because the category "Social Networking" is blocked.
Which configuration allows the user to see the Facebook post?
A)
B)
C)
D)
- A. Option C
- B. Option D
- C. Option A
- D. Option B
Answer: C
NEW QUESTION # 19
Which action is a valid default for the Global Access Policy in the Application Visibility Control engine on the Cisco WSA?
- A. monitor
- B. bandwidth limit
- C. restrict
- D. permit
Answer: A
NEW QUESTION # 20
Which type of FTP proxy does the Cisco WSA support?
- A. FTP over UDP tunneling
- B. non-native FTP
- C. hybrid FTP
- D. FTP over HTTP
Answer: D
NEW QUESTION # 21
When a Cisco WSA is installed with default settings, which port is assigned to the web proxy if the M1 port is used exclusively for management?
- A. T2
- B. T1
- C. P2
- D. P1
Answer: D
NEW QUESTION # 22
An administrator wants to restrict file uploads to Facebook using the AVC feature.
Under which two actions must the administrator apply this restriction to an access policy? (Choose two.)
- A. Monitor Facebook General
- B. Monitor Social Networking
- C. Monitor Facebook Application
- D. Monitor Facebook Photos and Videos
- E. Monitor Facebook Messages and Chat
Answer: A,D
NEW QUESTION # 23
Which two benefits does AMP provide compared to the other scanning engines on the Cisco WSA?
(Choose two.)
- A. protection against targeted file-based attacks
- B. protection against zero-day attacks
- C. protection against viruses
- D. protection against spam
- E. protection against malware
Answer: B,C
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/solutions/collateral/enterprise-networks/advanced-malware- protection/solution-overview-c22-734228.html
NEW QUESTION # 24
Which statement about configuring an identification profile for machine authentication is true?
- A. Cloud Web Security with Kerberos enabled supports machine authentication
- B. If an Active Directory realm is used, identification can be performed for an authenticated user or IP address but not for a machine ID
- C. Identification profile machine ID is supported locally, but the Cisco WSA does not support machine ID authentication
- D. Cloud Web Security Connector mode with an active directory enabled supports machine authentication
Answer: A
NEW QUESTION # 25
What is the purpose of using AMP file analysis on a Cisco WSA to continuously evaluate emerging threats?
- A. to take appropriate action on new files that enter the network
- B. to remove files from quarantine by stopping their retention period
- C. to send all files downloaded through the Cisco WSA to the AMP cloud
- D. to notify you of files that are determined to be threats after they have entered your network
Answer: D
NEW QUESTION # 26
When a Cisco WSA is installed with default settings, which port is assigned to the web proxy if the M1 port is used exclusively for management?
- A. T2
- B. T1
- C. P2
- D. P1
Answer: D
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-5/user_guide/ b_WSA_UserGuide_11_5_1/b_WSA_UserGuide_11_5_1_chapter_01.html
NEW QUESTION # 27
What is required on the Cisco WSA when an AMP file reputation server private cloud is configured?
- A. private key to decrypt messages
- B. private key from the server to encrypt messages
- C. public key from the server
- D. public and private keys from the server
Answer: C
NEW QUESTION # 28
By default, which two pieces of information does the Cisco WSA access log contain? (Choose two.)
- A. Client IP Address
- B. User Agent
- C. HTTP Request Code
- D. Transaction ID
- E. Content Type
Answer: A,C
NEW QUESTION # 29
What causes authentication failures on a Cisco WSA when LDAP is used for authentication?
- A. when the passphrase contains 50 characters
- B. when the passphrase contains characters that are not 7-bit ASCI
- C. when the passphrase contains one of following characters '@ # $ % ^'
- D. when the passphrase contains only 5 characters
Answer: B
NEW QUESTION # 30
Which two sources provide data to Cisco Advanced Web Security Reporting to create dashboards? (Choose two.)
- A. Cisco WSA devices
- B. Cisco ISE
- C. Cisco Security MARS
- D. Cisco Cloud Web Security gateways
- E. Cisco ASAv
Answer: A,D
NEW QUESTION # 31
Which two parameters are mandatory to control access to websites with proxy authentication on a Cisco WSA? (Choose two.)
- A. External Authentication
- B. Transparent User Identification
- C. Credential Encryption
- D. Authentication Realm
- E. Identity Enabled Authentication
Answer: C,D
NEW QUESTION # 32
Drag and drop the actions from the left into the correct order on the right in which they occur as an HTTPS session passes through the Cisco WSA.
Answer:
Explanation:
NEW QUESTION # 33
What is the function of a PAC file on a Cisco WSA?
- A. The file allows redirection of web traffic to a specific proxy server
- B. The file is mandatory for an explicit proxy to forward user traffic
- C. The file provides instructions about which URL categories are permitted
- D. The file is mandatory for a transparent proxy to redirect user traffic
Answer: A
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/116052-config- webauth-proxy-00.html
NEW QUESTION # 34
Which IP address and port are used by default to run the system setup wizard?
- A. http://192.168.42.42:80
- B. https://192.168.42.10:8443
- C. https://192.168.42.42:8080
- D. http://192.168.43.42:8080
Answer: C
Explanation:
Explanation/Reference: https://www.cisco.com/c/dam/en/us/td/docs/security/content_security/hardware/x95_series/ Sx95_GSG.pdf (14)
NEW QUESTION # 35
......
PDF (New 2023) Actual Cisco 300-725 Exam Questions: https://www.torrentexam.com/300-725-exam-latest-torrent.html
300-725 Exam Dumps, 300-725 Practice Test Questions: https://drive.google.com/open?id=1faVd8Re4zvEkZwC7FffoJzGc6o6EHrXl
