4.2 Configure Cisco Secure Access Secure Internet Access 350-701 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which tool or feature in Cisco Secure Access would you use to verify that a user's traffic is being correctly routed to the cloud for inspection?

   • APolicy simulator
   • BConnectivity diagnostics
   • CUser feedback form
   • DLog viewer
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   In Cisco Secure Access, what is the purpose of configuring routing policies?

   • ATo block all traffic to the internet
   • BTo encrypt all traffic between users
   • CTo assign IP addresses to users
   • DTo determine which traffic is sent to the cloud for security inspection
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company is integrating Cisco Secure Access with its on-premises Active Directory. The goal is to enforce user-based policies for internet traffic. The administrator has configured the integration and can see users syncing. However, when a user in the 'Executives' group browses the internet, the policy applied is the default 'Anywhere' policy instead of the 'Executives' policy. What is the most likely cause?

   • AThe Active Directory integration is failing to sync group membership
   • BThe user's browser is not configured to use the Cisco Secure Access proxy
   • CThe 'Executives' policy is configured for a different traffic type, such as SaaS, not internet
   • DThe 'Executives' group has not been assigned to a policy in Cisco Secure Access
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A company is using Cisco Secure Access and has a policy that blocks all traffic to 'Adult' sites. A user reports that they can access an adult site. The administrator checks the URL filtering category for the site and sees it is categorized as 'Uncategorized'. The policy blocks 'Adult' but allows 'Uncategorized' sites. What should the administrator do to resolve this issue?

   • AAdd the specific domain to a custom URL category and block that category in the policy
   • BChange the policy to block all 'Uncategorized' sites
   • CDisable URL filtering for this user and rely on other security services
   • DSubmit a request to the URL filtering vendor to recategorize the site
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   An organization is configuring Cisco Secure Access and wants to block all file-sharing applications (e.g., BitTorrent) for all users, regardless of their group membership. The administrator has already created a traffic policy for internet-bound traffic. What is the most efficient way to enforce this requirement?

   • ACreate a separate traffic policy for each user group and block file-sharing in each one
   • BCreate an application control policy that blocks the file-sharing application category and apply it to the internet traffic policy
   • CConfigure the firewall to block the ports commonly used by file-sharing applications
   • DCreate a URL filtering policy that blocks the 'File Sharing' URL category
   Reveal Solution Discussion Select an answer first