An engineer enabled SSL decryption for Cisco Umbrella intelligent proxy and needs to ensure that traffic is inspected without alerting end-users. Which action accomplishes this goal?

The correct answer is D. Import the Umbrella root CA into the trusted root store on the user's device. Intelligent Proxy with SSL Decryption - If a domain is proxied, the Cisco Umbrella root certificate must be installed to decrypt HTTPS traffic instead of the browser presenting an error page.

Submitted by saadiq_pk· Mar 30, 2026Content Security

Question

Options

AUpload the organization root CA to the Umbrella admin portal
BModify the user's browser settings to suppress errors from Umbrella.
CRestrict access to only websites with trusted third-party signed certificates.
DImport the Umbrella root CA into the trusted root store on the user's device.

How the community answered

(45 responses)

A
2% (1)
B
4% (2)
C
9% (4)
D
84% (38)

Explanation

Intelligent Proxy with SSL Decryption - If a domain is proxied, the Cisco Umbrella root certificate must be installed to decrypt HTTPS traffic instead of the browser presenting an error page.

Topics

#SSL decryption#Cisco Umbrella#root CA#certificate trust

Community Discussion

No community discussion yet for this question.

Full 350-701 Practice