Q1. What are two features of the Cisco ASA NGFW? (Choose two.) 

A. It can restrict access based on qualitative analysis. 

B. It can restrict access based on reputation. 

C. It can reactively protect against Internet threats. 

D. It can proactively protect against Internet threats. 

View Answer

Q2. The Web Security Appliance has identities defined for faculty and staff, students, and default access. The faculty and staff identity identifies users based on the source network and authenticated credentials. The identity for students identifies users based on the source network along with successful authentication credentials. The global identity is for guest users not authenticated against the domain. 

Recently, a change was made to the organization's security policy to allow faculty and staff access to a social network website, and the security group changed the access policy for faculty and staff to allow the social networking category. 

Which are the two most likely reasons that the category is still being blocked for a faculty and staff user? (Choose two.) 

A. The user is being matched against the student policy because the user did not enter credentials. 

B. The user is using an unsupported browser so the credentials are not working. 

C. The social networking URL was entered into a custom URL category that is blocked in the access policy. 

D. The user is connected to the wrong network and is being blocked by the student policy. 

E. The social networking category is being allowed but the AVC policy is still blocking the website. 

View Answer

Q3. Which three options are IPS signature classifications? (Choose three.) 

A. tuned signatures 

B. response signatures 

C. default signatures 

D. custom signatures 

E. preloaded signatures 

F. designated signatures 

View Answer

Q4. Which role does Passive Identity Management play in the Cisco Cloud Web Security architecture? 

A. It provides user-level information that is received from Active Directory. 

B. It enables the administrator to control web access for users and user groups. 

C. It defines a standard for exchanging authentication and authorization data. 

D. It controls content that passes into and out of the network. 

View Answer

Q5. Which Cisco Cloud Web Security Connector feature allows access by all of an organization's users while applying Active Directory group policies? 

A. a company authentication key 

B. a group authentication key 

C. a PAC file 

D. proxy forwarding 

E. a user authentication key 

View Answer

Q6. Which command establishes a virtual console session to a CX module within a Cisco Adaptive Security Appliance? 

A. session 1 ip address 

B. session 2 ip address 

C. session 1 

D. session ips console 

E. session cxsc console 

View Answer