300-725 sample questions

Question 1

What causes authentication failures on a Cisco WSA when LDAP is used for authentication?

Accepted Answer

when the passphrase contains characters that are not 7-bit ASCI

Answer

when the passphrase contains only 5 characters

Answer

when the passphrase contains one of following characters "˜@ # $ % ^'

Answer

when the passphrase contains 50 characters

Question 2

Refer to the exhibit. Which statement about the transaction log is true?

Accepted Answer

The AnalizeSuspectTraffic policy group was applied to the transaction

Answer

The log does not have a date and time

Answer

The proxy had the content and did not contact other servers

Answer

The transaction used TCP destination port 8187

Question 3

Which two features can be used with an upstream and downstream Cisco WSA web proxy to have the upstream WSA identify users by their client IP address?(Choose two.)

Accepted Answer

X-Forwarded-For

Accepted Answer

via

Answer

high availability

Answer

web cache

Answer

IP spoofing

Question 4

Which two configuration options are available on a Cisco WSA within a decryption policy? (Choose two.) A.Pass ThroughB.WarnC.DecryptD.AllowE.Block

Accepted Answer

Pass Through

Accepted Answer

Decrypt

Answer

Warn

Answer

Allow

Answer

Block

Question 5

An administrator is configuring WCCP to redirect traffic from a Cisco Catalyst switch to a Cisco Web Security Appliance (WSA). The deployment requires the WSA to return traffic to the switch using a different interface than the one used for ingress traffic to avoid routing loops. Which WCCP forwarding method must be configured on both devices to support this topology?

Accepted Answer

GRE (Generic Routing Encapsulation)

Answer

L2 Redirect (Layer 2)

Answer

PBR (Policy Based Routing)

Answer

Inline Bridging

Question 6

A security architect is designing a transparent proxy deployment for a branch office. The requirement is to preserve the original client IP address in the logs of the upstream web servers for auditing purposes. Which feature should be enabled on the Cisco WSA?

Accepted Answer

IP Spoofing

Answer

X-Forwarded-For Header insertion

Answer

Via Header insertion

Answer

Credential Encryption

Question 7

While troubleshooting an authentication issue, an administrator observes that users are being repeatedly prompted for credentials when accessing the internet. The WSA is configured for NTLM authentication. Which of the following conditions is the most likely cause of this behavior?

Accepted Answer

The WSA computer account in Active Directory has a time drift of more than 5 minutes relative to the Domain Controller.

Answer

The user is a member of too many Active Directory groups, exceeding the limit.

Answer

The Transparent User Identification method is set to 'redirect' instead of 'credential'.

Answer

The upstream firewall is blocking UDP port 88.

Question 8

A multinational corporation uses a PAC file to direct user traffic. They want to ensure that if the primary WSA (10.1.1.10) is unavailable, traffic automatically fails over to the secondary WSA (10.1.1.20), and if both fail, traffic goes DIRECT. Which JavaScript return statement correctly implements this logic?

Accepted Answer

return "PROXY 10.1.1.10:8080; PROXY 10.1.1.20:8080; DIRECT";

Answer

return "PROXY 10.1.1.10:8080 || PROXY 10.1.1.20:8080 || DIRECT";

Answer

if (isResolvable("10.1.1.10")) return "PROXY 10.1.1.10:8080"; else return "PROXY 10.1.1.20:8080";

Answer

return "PROXY 10.1.1.10:8080, 10.1.1.20:8080, DIRECT";

Top vendors

Top exams

Free 300-725 sample questions