300-725 Exam Dumps – PDF Questions and Testing Engine [Q13-Q32]

Q13. Which two log types does the Cisco WSA provide to troubleshoot Cisco data security and external data loss prevention policies? (Choose two.)

Q14. Which response code in the access logs indicates that a transaction was blocked due to policy?

Q15. Drag and drop the Cisco WSA access policy elements from the left into the order in which they are processed on the right.

Q16. Which configuration mode does the Cisco WSA use to create an Active Directory realm for Kerberos authentication?

Q17. A user browses to a company website that is categorized as “Business and Industry” and contains a Facebook post. The user cannot see the Facebook post because the category “Social Networking” is blocked.
Which configuration allows the user to see the Facebook post?
A)

B)

C)

D)

Q18. Which command is used to flush a single user from authentication memory?

Q19. What is the default action when a new custom category is created and added to an access policy?

Q20. Which key is needed to pair a Cisco WSA and Cisco ScanCenter for CTA?

Q21. Drag and drop the access policy options from the left onto the correct descriptions on the right.

Q22. When a Cisco WSA is installed with default settings, which port is assigned to the web proxy if the M1 port is used exclusively for management?

Q23. Which two benefits does AMP provide compared to the other scanning engines on the Cisco WSA?
(Choose two.)

Q24. Which certificate format does a Cisco WSA need when HTTPS proxy is configured?

Q25.

Refer to the exhibit. Which command displays this output?

Q26. Which method is used by AMP against zero-day and targeted file-based attacks?

Q27. Which two configuration options can be configured when invalid certificates are processed with the HTTPS proxy on WSA enabled? (Choose two.)

Q28. Which two features on the Cisco WSA help prevent outbound data loss for HTTP or FTP traffic? (Choose two.)

Q29. Refer to the exhibit.

Which command displays this output?

Q30. What is the purpose of using AMP file analysis on a Cisco WSA to continuously evaluate emerging threats?

Q31. How does the Cisco WSA choose which scanning engine verdict to use when there is more than one verdict?

Q32. Which statement about the SOCKS proxy is true?