300-415 Question #178: Real Exam Question with Answer & Explanation

The correct answer is D: A domain is grey-listed.. Cisco Umbrella's intelligent proxy is triggered to inspect web requests when a domain is "grey-listed," meaning it's neither definitively malicious nor completely safe, requiring deeper analysis. This allows Umbrella to provide deeper inspection of suspicious domains.

Security and Quality of Service

Question

Which issue triggers the Cisco Umbrella resolver to toward DNS requests to the intelligent proxy?

Options

AA domain is nonexistent.
BA domain is block-listed.
CA domain is locally reachable.
DA domain is grey-listed.

Explanation

Cisco Umbrella's intelligent proxy is triggered to inspect web requests when a domain is "grey-listed," meaning it's neither definitively malicious nor completely safe, requiring deeper analysis. This allows Umbrella to provide deeper inspection of suspicious domains.

Common mistakes.

A. If a domain is nonexistent, the DNS resolver will return an NXDOMAIN response, not forward the request to an intelligent proxy.
B. If a domain is block-listed, Umbrella will block the DNS resolution or redirect the user to a block page, not forward the request to an intelligent proxy for further inspection.
C. If a domain is locally reachable and not considered suspicious by Umbrella, the DNS request will be resolved directly without involving the intelligent proxy.

Concept tested. Cisco Umbrella Intelligent Proxy triggers

Reference. https://docs.umbrella.com/umbrella-user-guide/docs/intelligent-proxy

Topics

#Cisco Umbrella#Intelligent Proxy#DNS Security#Grey-listed Domains

Community Discussion

No community discussion yet for this question.

Full 300-415 Practice