CCIE Security
Domain 5Objective 8
5.8 HTTP Decryption and Inspection on Cisco FTD, Cisco WSA, and Cisco Umbrella CCIE-SECURITY Practice Questions (Page 1)
Part of the 5.0 Advanced Threat Protection and Content Security domain, which accounts for 20% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)
49questions here
10free pages
9concepts
20%of the exam
Questions 1–5
- 1
In Cisco FTD, which component is responsible for intercepting and decrypting HTTPS traffic before it is inspected by the security policies?
Select an answer first - 2
In Cisco FTD, how can you configure a decryption exception for a specific domain?
Select an answer first - 3
What is a primary performance impact of enabling HTTPS decryption on a Cisco FTD device?
Select an answer first - 4
Which best practice helps scale HTTPS decryption across a large enterprise deployment?
Select an answer first - 5
A user reports that they receive a certificate error when accessing a website through a Cisco WSA that performs HTTPS decryption. What is the most likely cause?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.