CCIE Security
Domain 5Objective 8
5.8 HTTP Decryption and Inspection on Cisco FTD, Cisco WSA, and Cisco Umbrella CCIE-SECURITY Practice Questions (Page 3)
Part of the 5.0 Advanced Threat Protection and Content Security domain, which accounts for 20% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)
49questions here
10free pages
9concepts
20%of the exam
Questions 11–15
- 11
Which Cisco security product performs HTTP decryption and inspection in the cloud, without an on-premises appliance?
Select an answer first - 12
In Cisco FTD, which object can be used in a decryption policy rule to match traffic based on the destination server's domain name?
Select an answer first - 13
What is the default action for a decryption policy rule in Cisco FTD if no rule matches the traffic?
Select an answer first - 14
When a Cisco WSA performs HTTPS decryption, what certificate does it present to the client?
Select an answer first - 15
What is the purpose of certificate pinning in the context of HTTP decryption?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.