Cisco Web Security Field Engineer Specialist

1.

VisualexamsIf authentication is enabled, which statement is true?

client reports will display authenticated usernames client reports will display both the username and IP address of the clients client reports are not affected by authentication client reports will display the IP address of the authentication server.

2.

what is the S-Series Proxy Bypass List?

a list of proxy servers that are to be bypassed a list of clients and destinations that will bypass the proxy in transparent mode a list of clients and destinations that will bypass the proxy in explicit forward mode a list of user agents exempt from authentication

3.

what is "stream scanning?

scanning streaming media for malware scanning multiple downloads at the same time passing pieces of a download to the client while the download is being scanned passing scanned pieces of the file between two different malware scanning engines

4.

you are helping the customer customer configure anthentication, a new asyncOS upgrade becomes available, what should you do?

avoid mentioning the upgrade to the customer schedule a convenient time to upgrade again, backing up the configuration before and after the upgrade contact customer support and ask them to run the upgrade for you immediately show the customer how to run the CLI command upgrade

5.

which statement about WSA user authentication is true?

a single WSA can have multiple LDAP realms WSA supports LDAP but not NTLM WSA supports NTLM but not LDAP a single WSA can have up to two authentication realms: one for LDAP and for NTLM

6.

which statement about using McAfee and Webroot together is true?

it is not recommended: the system will not detect more malware it is not possible : the WSA will accept only one anti-malware license the system will stop all web-based threats it is recommended: the system will detect more malware

7.

which statement is true?

sawmill for Cisco Ironport cannot generate L4TM reports sawmill for Cisco Ironport reports are provided in real time sawmill for Cisco Ironport can only generate reports using one access log sawmill for Cisco Ironport reports are highly customizable

8.

in the access log, what does an ACL tag beginning with BLOCK_ADMIN indicate?

the destination was manually added to the block list the malware category is set to blocking mode the transaction was blocked because of application or object properties the transaction was manually blocked by the administrative user

9.

if you want to reset your configuration back to the factory defaults but keep your logs and reports, which CLI command should you use>

resetconfig restoreconfig loadconfig reload

10.

why does L4TM require T1 to be in promiscuous mode?

to process traffic that is not intended for its MAC address to transmit TCP reset packets to bind with other promiscuous mode ports to receive Ethernet broadcasts

Cisco Web Security Field Engineer Specialist

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

Cisco Web Security Field Engineer Specialist

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner