300-725 · Question #10
An administrator wants to restrict file uploads to Facebook using the AVC feature. Under which two actions must the administrator apply this restriction to an access policy? (Choose two.)
The correct answer is A. Monitor Facebook General C. Monitor Facebook Photos and Videos. To restrict Facebook file uploads using AVC on the Cisco WSA, the administrator must apply restrictions under both the Facebook General and Facebook Photos and Videos application sub-categories.
Question
An administrator wants to restrict file uploads to Facebook using the AVC feature. Under which two actions must the administrator apply this restriction to an access policy? (Choose two.)
Options
- AMonitor Facebook General
- BMonitor Social Networking
- CMonitor Facebook Photos and Videos
- DMonitor Facebook Messages and Chat
- EMonitor Facebook Application
How the community answered
(66 responses)- A82% (54)
- B2% (1)
- D11% (7)
- E6% (4)
Why each option
To restrict Facebook file uploads using AVC on the Cisco WSA, the administrator must apply restrictions under both the Facebook General and Facebook Photos and Videos application sub-categories.
Facebook General must be restricted because it covers core Facebook application behaviors including general upload actions not captured by more specific sub-categories, so leaving it unrestricted would allow those uploads to proceed.
Social Networking is a broad URL category, not an AVC application sub-category, and restricting it would affect all social networking sites rather than targeting Facebook uploads specifically.
Facebook Photos and Videos must also be restricted because file uploads to Facebook - particularly images and video content - are governed by this specific AVC sub-category, and restricting only Facebook General would not block media-type uploads handled here.
Facebook Messages and Chat governs Facebook communication features such as Messenger, not file or media upload functionality.
Facebook Application is not the correct AVC sub-category granularity needed to restrict file uploads; the upload behavior is controlled through the General and Photos and Videos sub-categories.
Concept tested: AVC application control for restricting Facebook file uploads
Source: https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa12-0/user_guide/b_WSA_UserGuide_12_0/b_WSA_UserGuide_12_0_chapter_010110.html
Topics
Community Discussion
No community discussion yet for this question.