Which response code in the access logs indicates that a transaction was blocked due to policy?

1. A. TCP_DENIED/407
2. B. TCP_DENIED/401
3. C. TCP_DENIED/403
4. D. TCP_DENIED/307

Correct Answer: A

Which key is needed to pair a Cisco WSA and Cisco ScanCenter for CTA?

1. A. public SSH key that the Cisco WSA generates
2. B. public SSH key that Cisco ScanCenter generates
3. C. private SSH key that Cisco ScanCenter generates
4. D. private SSH key that the Cisco WSA generates

Correct Answer: A

Refer to the exhibit.

Which statement about the transaction log is true?

1. A. The log does not have a date and time
2. B. The proxy had the content and did not contact other servers
3. C. The transaction used TCP destination port 8187
4. D. The AnalizeSuspectTraffic policy group was applied to the transaction

Correct Answer: D

What is needed to enable an HTTPS proxy?

1. A. self-signed server certificate
2. B. trusted third-party CA signed root certificate
3. C. self-signed CSR
4. D. self-signed root certificate

Correct Answer: C

Which information in the HTTP request is used to determine if it is subject to the referrer exceptions feature in the Cisco WSA?

1. A. protocol
2. B. version
3. C. header
4. D. payload

Correct Answer: C
Requests for embedded content usually include the address of the site from which the request originated (this is known as the “referer” field in the request’s HTTP header). This header information is used to determine categorization of the referred content.
Reference https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-0/user_guide/b_WSA_UserGuide/ b_WSA_UserGuide_chapter_01100.html