首页 > 题库 > 300-425

通过CCNP 300-425实践题，轻松获得成功——Cisco企业无线网络 | 思博网络

通过我们为Cisco企业无线网络量身定制的综合练习题目，您在CCNP 300-425考试的准备过程中能够取得成功。我们的考试资料涵盖了诸如现场勘测、有线和无线基础设施、移动性以及WLAN的高可用性等重要主题。这些内容确保了考生能够充分准备好参加考试。您可以访问我们的模拟考试，以模拟真实的考试场景，从而有效提升您的技能水平。请利用我们提供的详细考试答案，以加深您对关键概念的理解。借助思博网络提供的可靠资源，包括样题和模拟历年真题，你可以最大限度地提高备考效果，增强自己的信心。从今天开始，踏上通往成功的旅程吧！充分发挥你的潜力，获得这项备受瞩目的Cisco认证专家——企业无线设计认证。使用我们的考试练习资料，高效地准备考试，从而开启你的成功之路。

问题 #1

Which information in the HTTP request is used to determine if it is subject to the referrer exceptions feature in the Cisco WSA?

A. protocol

B. version

C. header

D. payload

正确答案：AC

问题 #2

Which statement about configuring an identification profile for machine authentication is true?

A. Cloud Web Security Connector mode with an active directory enabled supports machine authentication

B. Identification profile machine ID is supported locally, but the Cisco WSA does not support machine ID authentication

C. Cloud Web Security with Kerberos enabled supports machine authentication

D. If an Active Directory realm is used, identification can be performed for an authenticated user or IP address but not for a machine ID

正确答案：C

问题 #3

What is needed to enable an HTTPS proxy? https://community.cisco.com/t5/web-security/cisco-wsa-https-proxy-certificate-issue/td-p/3019392

A. self-signed server certificate.

B. trusted third-party CA signed root certificate.

C. self-signed CSR.

D. self-signed root certificate.

正确答案：C

问题 #4

Which two configuration options can be configured when invalid certificates are processed with the HTTPS proxy on WSA enabled? (Choose two.) https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-7/user_guide/

A. allow.

B. monitor.

C. drop.

D. block.

E. redirect.

正确答案：BC

问题 #5

Which two features can be used with an upstream and downstream Cisco WSA web proxy to have the upstream WSA identify users by their client IP address? (Choose two.)

A. X-Forwarded-For

B. high availability

C. web cache

D. via

E. IP spoofing

正确答案：D

问题 #6

How does dynamic content analysis improve URL categorization? https://www.cisco.com/c/en/us/support/docs/security/web-security-appliance/118063-qanda-wsa- 00.html

A. It analyzes content based on cached destination content.

B. It adds intelligence to detect categories by analyzing responses.

C. It can be used as the only URL analysis method.

D. It analyzes content of categorized URL to tune decisions and correct categorization errors.

正确答案：D

问题 #7

What is needed to enable an HTTPS proxy?

A. self-signed server certificate

B. trusted third-party CA signed root certificate

C. self-signed CSR

D. self-signed root certificate

正确答案：C

问题 #8

What is a benefit of integrating Cisco WSA with TrustSec in ISE?

A. The policy trace tool can be used to match access policies using specific SGT

B. Traffic of authenticated users who use 802.1x can be tagged with SGT to identification profiles in a Cisco WSAC. ISE can block authentication for users who generate multiple sessions using suspect TCP ports

D. Users in a specific SGT can be denied access to certain social websites.

正确答案：A

问题 #9

A network administrator noticed that all traffic that is redirected to the Cisco WSA from the Cisco ASA firewall cannot get to the Internet in a Transparent proxy environment using WCCP. Which troubleshooting action must be taken on the CLI to make sure that WCCP communication is not failing?

A. Disable WCCP to see if the WCCP service is causing the issue

B. Explicitly point the browser to the proxy

C. Ping the WCCP device

D. Check WCCP logs in debug mode

正确答案：D

问题 #10

When a Cisco WSA is installed with default settings, which port is assigned to the web proxy if the M1 port is used exclusively for management?

A. T1

B. P2

C. T2

D. P1

正确答案：C

问题 #11

Which configuration mode does the Cisco WSA use to create an Active Directory realm for Kerberos authentication?

A. Forward

B. Connector

C. Transparent

D. Standard

正确答案：D

问题 #12

Which response code in the access logs indicates that a transaction was blocked due to policy?

A. TCP_DENIED/407

B. TCP_DENIED/401

C. TCP_DENIED/403

D. TCP_DENIED/307

正确答案：A

问题 #13

A user browses to a company website that is categorized as Business and Industry and contains a Facebook post. Theuser cannot see the Facebook post because the category Social Networking is blocked.Which configuration allows the user to see the Facebook post?

A. Option A

B. Option B

C. Option C

D. Option D

正确答案：A

问题 #14

Which two log types does the Cisco WSA provide to troubleshoot Cisco data security and external data loss prevention policies? (Choose two.)

A. upload data

B. data security

C. default proxyD. data access

E. external data

正确答案：D

问题 #15

Which action is a valid default for the Global Access Policy in the Application Visibility Control engine on the Cisco WSA?

A. bandwidth limit

B. permit

C. restrict

D. monitor

正确答案：D

问题 #16

Which command displays this output?

A. grep

B. logconfig

C. rollovernow

D. tail

正确答案：B

问题 #17

An administrator wants to restrict file uploads to Facebook using the AVC feature. Under which two actions must the administrator apply this restriction to an access policy? (Choose two.) https://www.cisco.com/c/en/us/products/collateral/security/web-security-appliance/datasheet-c78- 741272.html

A. Monitor Facebook General.

B. Monitor Social Networking.

C. Monitor Facebook Photos and Videos.

D. Monitor Facebook Messages and Chat.

E. Monitor Facebook Application.

正确答案：AC

问题 #18

What must be configured first when creating an access policy that matches the Active Directory group?

A. authentication, authorization, and accounting of groups

B. FQDN specification

C. authentication realm

D. authorized groups specification

正确答案：C

问题 #19

What must be configured to require users to click through an acceptance page before they are allowed to go to the Internetthrough the Cisco WSA?

A. Enable End-User Acknowledgement Page and set to Required in Identification Profiles

B. Enable End -User URL Filtering Warning Page and set to Required in Identification Profiles

C. Enable End-User Acknowledgement Page and set to Required in Access Policies

D. Enable End-User URL Filtering Warning Page and set to Required in Access Policies

正确答案：C

问题 #20

Which two caching modes are available in the Cisco WSA? (Choose two.) https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-5/user_guide/ b_WSA_UserGuide_11_5_1/b_WSA_UserGuide_11_5_1_chapter_0100.html#task_1214899

A. active cache.

B. all cache.

C. aggressive cache.

D. safe cache.

E. no cache.

正确答案：CD

问题 #21

Which two configuration options can be configured when invalid certificates are processed with the HTTPS proxy on WSA enabled? (Choose two.)

A. allow

B. monitor

C. drop

D. block

E. redirect

正确答案：B

查看更多题库 »