- (Exam Topic 1)
What is the purpose of the Decrypt for Application Detection feature within the WSA Decryption options?

1. A. It decrypts HTTPS application traffic for unauthenticated users.
2. B. It alerts users when the WSA decrypts their traffic.
3. C. It decrypts HTTPS application traffic for authenticated users.
4. D. It provides enhanced HTTPS application detection for AsyncOS.

Correct Answer: D

- (Exam Topic 3)
An engineer must modify a policy to block specific addresses using Cisco Umbrella. The policy is created already and is actively u: of the default policy elements. What else must be done to accomplish this task?

1. A. Add the specified addresses to the identities list and create a block action.
2. B. Create a destination list for addresses to be allowed or blocked.
3. C. Use content categories to block or allow specific addresses.
4. D. Modify the application settings to allow only applications to connect to required addresses.

Correct Answer: B

- (Exam Topic 3)
Which two parameters are used to prevent a data breach in the cloud? (Choose two.)

1. A. DLP solutions
2. B. strong user authentication
3. C. encryption
4. D. complex cloud-based web proxies
5. E. antispoofing programs

Correct Answer: AB

- (Exam Topic 3)
What is a difference between a DoS attack and a DDoS attack?

1. A. A DoS attack is where a computer is used to flood a server with TCP and UDP packets whereas a DDoS attack is where multiple systems target a single system with a DoS attack
2. B. A DoS attack is where a computer is used to flood a server with TCP and UDP packets whereas a DDoS attack is where a computer is used to flood multiple servers that are distributed over a LAN
3. C. A DoS attack is where a computer is used to flood a server with UDP packets whereas a DDoS attack is where a computer is used to flood a server with TCP packets
4. D. A DoS attack is where a computer is used to flood a server with TCP packets whereas a DDoS attack is where a computer is used to flood a server with UDP packets

Correct Answer: A

- (Exam Topic 2)
What is a difference between DMVPN and sVTI?

1. A. DMVPN supports tunnel encryption, whereas sVTI does not.
2. B. DMVPN supports dynamic tunnel establishment, whereas sVTI does not.
3. C. DMVPN supports static tunnel establishment, whereas sVTI does not.
4. D. DMVPN provides interoperability with other vendors, whereas sVTI does not.

Correct Answer: B