How does Cisco Umbrella integrate with an on-premises Cisco WSA for HTTPS inspection?

They operate independently with no integration

The WSA forwards traffic to Umbrella for cloud-based decryption and policy enforcement

Umbrella forwards all traffic to the WSA for decryption

Umbrella sends decryption policies to the WSA via API

What is the purpose of policy synchronization between Cisco FTD and Cisco Umbrella?

To allow Umbrella to manage FTD's decryption certificates

To ensure that URL filtering policies are consistent across on-premises and cloud security layers

To enable FTD to send decrypted traffic to Umbrella for inspection

To replace FTD's decryption policies with Umbrella's

What is a legal requirement that organizations must consider before decrypting employee HTTPS traffic?

Ensuring that all decrypted data is stored indefinitely

Obtaining user consent and providing notification

Decrypting all traffic without exception

Using only public CAs for decryption certificates

Which practice helps protect user privacy when implementing HTTPS decryption?

Storing all decrypted traffic for later analysis

Using weak encryption for decrypted data

Excluding sensitive categories like healthcare and finance from decryption

Sharing decrypted data with third parties without consent

CCIE Security

Domain 5Objective 8

5.8 HTTP Decryption and Inspection on Cisco FTD, Cisco WSA, and Cisco Umbrella CCIE-SECURITY Practice Questions (Page 2)

Part of the 5.0 Advanced Threat Protection and Content Security domain, which accounts for 20% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

9concepts

20%of the exam

Questions 6–10

6foundation · easy
When troubleshooting decryption issues on Cisco FTD, which log type would you examine to see if traffic is being decrypted or bypassed?
Select an answer first
7foundation · easy
How does Cisco Umbrella integrate with an on-premises Cisco WSA for HTTPS inspection?
Select an answer first
8foundation · easy
What is the purpose of policy synchronization between Cisco FTD and Cisco Umbrella?
Select an answer first
9foundation · easy
What is a legal requirement that organizations must consider before decrypting employee HTTPS traffic?
Select an answer first
10foundation · easy
Which practice helps protect user privacy when implementing HTTPS decryption?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.