nerdexam
Cisco

300-725 · Question #10

An administrator wants to restrict file uploads to Facebook using the AVC feature. Under which two actions must the administrator apply this restriction to an access policy? (Choose two.)

The correct answer is A. Monitor Facebook General C. Monitor Facebook Photos and Videos. To restrict Facebook file uploads using AVC on the Cisco WSA, the administrator must apply restrictions under both the Facebook General and Facebook Photos and Videos application sub-categories.

Access Policies

Question

An administrator wants to restrict file uploads to Facebook using the AVC feature. Under which two actions must the administrator apply this restriction to an access policy? (Choose two.)

Options

  • AMonitor Facebook General
  • BMonitor Social Networking
  • CMonitor Facebook Photos and Videos
  • DMonitor Facebook Messages and Chat
  • EMonitor Facebook Application

How the community answered

(66 responses)
  • A
    82% (54)
  • B
    2% (1)
  • D
    11% (7)
  • E
    6% (4)

Why each option

To restrict Facebook file uploads using AVC on the Cisco WSA, the administrator must apply restrictions under both the Facebook General and Facebook Photos and Videos application sub-categories.

AMonitor Facebook GeneralCorrect

Facebook General must be restricted because it covers core Facebook application behaviors including general upload actions not captured by more specific sub-categories, so leaving it unrestricted would allow those uploads to proceed.

BMonitor Social Networking

Social Networking is a broad URL category, not an AVC application sub-category, and restricting it would affect all social networking sites rather than targeting Facebook uploads specifically.

CMonitor Facebook Photos and VideosCorrect

Facebook Photos and Videos must also be restricted because file uploads to Facebook - particularly images and video content - are governed by this specific AVC sub-category, and restricting only Facebook General would not block media-type uploads handled here.

DMonitor Facebook Messages and Chat

Facebook Messages and Chat governs Facebook communication features such as Messenger, not file or media upload functionality.

EMonitor Facebook Application

Facebook Application is not the correct AVC sub-category granularity needed to restrict file uploads; the upload behavior is controlled through the General and Photos and Videos sub-categories.

Concept tested: AVC application control for restricting Facebook file uploads

Source: https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa12-0/user_guide/b_WSA_UserGuide_12_0/b_WSA_UserGuide_12_0_chapter_010110.html

Topics

#Cisco WSA AVC#Access Policies#File Upload Restriction#Application Control

Community Discussion

No community discussion yet for this question.

Full 300-725 Practice