4.2 Configure Cisco Secure Access Secure Internet Access 350-701 Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A user reports that a specific website is being blocked by Cisco Secure Access, but the administrator's policy allows the site. The administrator checks the URL filtering category for the site and sees it is categorized as 'Business'. The policy allows 'Business' sites. What should the administrator check next?

   • AThe application control policy to see if the site's application is blocked
   • BThe user's group membership and the policy precedence for that group
   • CThe malware protection logs to see if the site is flagged as malicious
   • DThe user's browser proxy settings to ensure they are correct
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A company is deploying Cisco Secure Access. The security policy requires that all internet traffic be inspected for malware, but the company also has a critical business application that uses a proprietary protocol that is not well-known and is sometimes flagged as a threat by the malware protection engine. The application's traffic must not be blocked. How should the administrator configure the policies to meet both requirements?

   • AConfigure the malware protection policy to only inspect traffic to known malicious domains
   • BCreate a separate traffic policy for the business application that bypasses all security services
   • CDisable malware protection for all traffic and rely on URL filtering
   • DCreate a malware protection policy that blocks threats, and add an exception for the business application's domain
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which deployment model is characteristic of Cisco Secure Access as an SSE solution?

   • AA hardware appliance installed in each branch office
   • BA cloud-based service that users and branches connect to via the internet
   • CA virtual appliance deployed in a single cloud region
   • DA software agent installed only on servers in the data center
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   When configuring Cisco Secure Access for secure internet access, which element is required to identify users for policy enforcement?

   • AA static IP address assigned to each user
   • BA user identity source, such as an identity provider or directory service
   • CA local database of all user passwords
   • DA certificate installed on every user device
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   An organization is configuring Cisco Secure Access for internet traffic. The security policy requires that all traffic to social media sites be blocked for the 'Finance' user group, but allowed for the 'Marketing' group. The administrator has already integrated the identity provider and created the two user groups. What is the next step to enforce this requirement?

   • AAssign the Finance group a different internet gateway than the Marketing group
   • BConfigure the firewall to block social media based on destination IP addresses
   • CCreate a URL filtering policy that references the Finance and Marketing groups and apply it to the internet-bound traffic policy
   • DCreate a single policy that blocks social media for all users and then create an exception for the Marketing group
   Reveal Solution Discussion Select an answer first