2.1 Create and Apply Security Policies (i.e., App-ID, User-ID, Content-ID) NETWORK-SECURITY-ANALYST Practice Questions (Page 3)

Questions 11–14

1. 11foundation · easy

   In a security policy rule, which match criterion would you use to restrict access to a specific application to only the members of the 'Engineering' group?

   • ASource
   • BHIP
   • CApplication
   • DUser
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company has a security policy rule that blocks all traffic to a specific IP address (rule 1). They want to allow a specific application to that IP address (rule 2). The administrator adds rule 2 after rule 1. The application traffic is still blocked. What should the administrator do?

   • ADelete rule 1.
   • BMove rule 2 above rule 1.
   • CChange rule 1 to allow the application.
   • DChange rule 2 to block the application.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which security policy profile is used to enforce URL filtering based on categories such as 'social-networking' or 'malware'?

   • AURL Filtering profile
   • BFile Blocking profile
   • CAnti-Spyware profile
   • DVulnerability Protection profile
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A company has a security policy that allows all users to access the internet, but they want to block access to a specific application for users in the 'HR' group. User-ID is integrated with Active Directory. The administrator creates a rule that blocks the application for the 'HR' group and places it above the allow rule. However, some HR users can still access the application. What is the most likely reason?

   • AThe allow rule is placed above the block rule.
   • BThe block rule is not committed.
   • CThe User-ID mapping for those users is not up to date.
   • DThe block rule uses the wrong application.
   Reveal Solution Discussion Select an answer first