- (Exam Topic 1)
What is the function of the Context Directory Agent?

1. A. maintains users’ group memberships
2. B. relays user authentication requests from Web Security Appliance to Active Directory
3. C. reads the Active Directory logs to map IP addresses to usernames
4. D. accepts user authentication requests on behalf of Web Security Appliance for user identification

Correct Answer: C
Reference: https://www.cisco.com/c/en/us/td/docs/security/ibf/cda_10/Install_Config_guide/cda10/cda_oveviw.html

- (Exam Topic 2)
Which type of algorithm provides the highest level of protection against brute-force attacks?

1. A. PFS
2. B. HMAC
3. C. MD5
4. D. SHA

Correct Answer: D

- (Exam Topic 2)
Which type of protection encrypts RSA keys when they are exported and imported?

1. A. file
2. B. passphrase
3. C. NGE
4. D. nonexportable

Correct Answer: B

- (Exam Topic 2)
What is a benefit of conducting device compliance checks?

1. A. It indicates what type of operating system is connecting to the network.
2. B. It validates if anti-virus software is installed.
3. C. It scans endpoints to determine if malicious activity is taking place.
4. D. It detects email phishing attacks.

Correct Answer: B

- (Exam Topic 3)
What are two ways a network administrator transparently identifies users using Active Directory on the Cisco WSA? (Choose two.)

1. A. Create an LDAP authentication realm and disable transparent user identification.
2. B. Create NTLM or Kerberos authentication realm and enable transparent user identification.
3. C. Deploy a separate Active Directory agent such as Cisco Context Directory Agent.
4. D. The eDirectory client must be installed on each client workstation.
5. E. Deploy a separate eDirectory server; the dent IP address is recorded in this server.

Correct Answer: AC