700-281 Exam Questions

Which of the following is NOT provided by AVC?

Which option describes a reason that a security administrator would configure suspect user agent scanning?

How long is reporting data kept on record in WIRe by default?

Which statement is true?

What are PAC files used for?

When do you need to configure the P1 interface?

Which of these is an optional feature, requiring the purchase of a separate license after 30 days?

Which authentication protocol takes precedence by default when WSA uses AD authentication?

What feature on the WSA provides Day Zero Revocation of access to third party sites such as Salesforce?

Which of these is a configurable Cisco IOS feature that triggers notifications if an attack attempts to exhaust critical router resources and if preventative controls have been byp...

Which of these is a suspect user agent?

Which credentials must be entered into the S-Series GUI when joining the Active Directory domain?

Which protocol does External Data Loss Protection integration with the Web Security Appliance use?

Which action can the security administrator define using Application Visibility and Controls?

Drag and Drop Question Put the following features in the order they are applied. Answer:

Why does L4TM require T1 to be in promiscuous mode?

Which action does Dynamic Content Analysis enable the Web Security Appliance to do?

In the access log, what does an ACL tag beginning with BLOCK_ADMIN indicate?

You are helping the customer configure authentication. A new AsyncOS upgrade becomes available, what should you do?

Which of these cannot be used in defining policies?

What is "stream scanning"?

Which of these is not used as a monitoring tool?

Which option describes how a user enables licensed features on the virtual WSA?

Which option describes the Cisco best practice for configuration of the Web Usage Control feature?

If authentication is enabled, which statement is true?

What does the appearance of the ACL tag BLOCK_WBRS in the access log mean?

Which option describes the Cisco best practice for using authentication-based access policies?

If you want to create a ScanSafe filter that will block any shopping or gambling website, what should you add to the filter?

For WSA SaaS Access Control, the Identity Provider is:

How is PIM usually run?

Which statement about HTTPS decryption on the WSA is true?

Which of these is not part of the pre_installation worksheet?

Which of these is not an action that is associated with HTTPS decryption policies?

Which file characteristic cannot be used in the Cisco IronPort Data Security policies?

Which of these uses ICAP?

Which statement about the S-Series native FTP proxy is not true?

If you want to reset your configuration back to the factory defaults but keep your logs and reports, which CLI command should you use?

A single transaction can be scanned in parallel by:

Which option describes the policies that the security administrator can create using Adaptive Scanning?

Which S-Series CLI command can help troubleshoot WCCP?

Which statement is false?

Which statement about WSA user authentication is true?

What is a benefit of NTLMSSP over basic authentication?

What is the S-Series Proxy Bypass List?

Which CLI command is used to create a W3C log?

Bandwidth limits cannot be:

Which statement about the DVS engine is true?

Which sites does WBRS block by default?

TRR and TRT are associated with which WSA component?

In AsyncOS 7.0 for web the choice of Authentication Surrogate is?