300-725 무료 덤프문제 온라인 액세스

Which configuration mode does the Cisco WSA use to create an Active Directory realm for Kerberos authentication?

• A.Forward
• B.Connector
• C.Transparent
• D.Standard

A company recently deployed Cisco Secure Web Appliance in transparent mode in a highly secure environment. Clients that use Mozilla Firefox and Google Chrome can access web sites without any additional step; however, clients that use Internet Explorer are prompted to enter a username and password to connect. What additional configuration step must be taken in the security settings of Internet Explorer to prevent the authentication prompt?

• A.Select the Bypass proxy server for local intranet addresses check box in the LAN settings.
• B.Add the appliance redirect hostname to the list of trusted sites in the Local Intranet zone.
• C.Navigate to the IE Enhanced Security Configuration and turn it off for Users.
• D.Set the location of the PAC file in the Use automatic configuration script field.

An administrator has set up a Cisco Secure Web Appliance so users can connect to the appliance's web GUI using non-local accounts. One of the users is able to connect to the GUI, but is unable to make any changes. What must be done to address this issue?

• A.Create a local user account on the Cisco Secure Web Appliance as non-local accounts cannot make changes on the Cisco Secure Web Appliance GUI.
• B.Examine external authentication logs to determine the role the user is assigned and modify the Cisco Secure Web Appliance settings to provide the appropriate access.
• C.Examine GUI logs to determine the user's username and modify the Cisco Secure Web Appliance settings to provide the appropriate access to the specified username.
• D.Add the non-local account to 'Administrators' AD group as this is needed to make changes on the Cisco Secure Web Appliance GUI.

Drag and Drop Question
Drag and drop the Cisco WSA methods from the left onto the correct deployment modes on the right.

정답:

Explanation:
You could use an explicit setting (browser config/PAC/WPAD) or transparent (WCCP/PBR) to point to the first proxy and then the first proxy will route based on category to one of the two upstream proxies based on your policy configuration.
Reference: https://community.cisco.com/t5/web-security/route-to-wsa-based-on-destination/td- p/2491179

What is the primary benefit of enabling HTTPS decryption on Cisco Secure Web Appliance?

• A.Increase bandwidth
• B.Inspect encrypted traffic for threats
• C.Reduce CPU usage
• D.Disable SSL certificates