300-725 Practice Test

300-725 Practice Test practice questions, page 3 of 5, with answer review and explanations.

Question 11

Which method is used by AMP against zero-day and targeted file-based attacks?

  1. analyzing behavior of all files that are not yet known to the reputation service
  2. periodically evaluating emerging threats as new information becomes available
  3. implementing security group tags
  4. obtaining the reputation of known files

Question 12

Which behavior is seen while the policy trace tool is used to troubleshoot a Cisco WSA?

  1. External DLP polices are evaluated by the tool
  2. A real client request is processed and an EUN page is displayed
  3. SOCKS policies are evaluated by the tool
  4. The web proxy does not record the policy trace test requests in the access log when the tool is in use

Question 13

What are all of the available options for configuring an exception to blocking for referred content?

  1. all embedded/referred and all embedded/referred except
  2. selected embedded/referred except, all embedded/referred, and selected embedded/referred
  3. selected embedded/referred and all embedded/referred except
  4. all embedded/referred, selected embedded/referred, and all embedded/referred except

Question 14

Which statement about the SOCKS proxy is true?

  1. SOCKS is a general purpose proxy
  2. SOCKS operates on TCP port 80, 443, and 8334
  3. SOCKS is used only for traffic that is redirected through a firewall
  4. SOCKS is used for UDP traffic only

Question 15

Which two parameters are mandatory to control access to websites with proxy authentication on a Cisco WSA? (Choose two.)

  1. External Authentication
  2. Identity Enabled Authentication
  3. Transparent User Identification
  4. Credential Encryption
  5. Authentication Realm