4.2 Configure Cisco Secure Access Secure Internet Access 350-701 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which component is essential in the Cisco Secure Access architecture to route user traffic to the cloud for security inspection?

   • AA DNS server configured to resolve all domains to the cloud
   • BA dedicated MPLS circuit to the cloud provider
   • CA physical firewall at the user's location
   • DA secure tunnel or client that directs traffic to the Cisco Secure Access cloud
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A company is deploying Cisco Secure Access and has integrated it with its on-premises Active Directory. The administrator wants to enforce different policies for users in the 'Sales' and 'Engineering' groups. The administrator has created the policies and mapped the groups. However, users in the 'Sales' group are receiving the 'Engineering' policy. What is the most likely cause?

   • AThe 'Sales' group is not correctly mapped to the 'Sales' policy in Cisco Secure Access
   • BThe 'Sales' policy is configured for a different traffic type
   • CThe Active Directory integration is not syncing the 'Sales' group correctly
   • DThe 'Sales' users are also members of the 'Engineering' group in Active Directory
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A company is deploying Cisco Secure Access and wants to ensure high availability. The administrator is concerned about a single point of failure if the primary cloud region becomes unavailable. What is the best way to address this concern?

   • ASet up a site-to-site VPN to a secondary data center as a backup
   • BRely on the user's local internet connection for failover
   • CDeploy a second Cisco Secure Access instance in a different cloud provider
   • DConfigure the Cisco Secure Access client to automatically fail over to a secondary region
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   Users report that they are unable to access a specific business application that is hosted on the internet. The administrator has verified that the Cisco Secure Access policy allows traffic to the application's domain. However, the application is still not loading. Which troubleshooting step should the administrator take first?

   • AConfirm that the application's domain is not categorized as a 'High Risk' site in the URL filtering database
   • BReboot the user's computer to clear any cached DNS or proxy settings
   • CVerify that the user's browser is configured to use the correct proxy server
   • DCheck the Cisco Secure Access logs to see if the traffic is being blocked by a different policy, such as malware protection or application control
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   An organization is migrating from a legacy on-premises web proxy to Cisco Secure Access. The administrator has configured the identity provider integration and created policies for internet traffic. However, users are reporting that they are being prompted to authenticate twice when they browse the internet. The first prompt is for the Cisco Secure Access portal, and the second is for the application they are trying to access. What is the most likely cause of this issue?

   • AThe Cisco Secure Access policy is configured to require authentication for all traffic
   • BThe identity provider integration is not configured for single sign-on (SSO)
   • CThe user is a member of multiple groups with conflicting policies
   • DThe user's browser is not configured to use the correct proxy server
   Reveal Solution Discussion Select an answer first