mediumMultiple ChoiceObjective-mapped
350-701 Practice Question: Deploying Cisco Web Security Appliance (WSA) to…
A company is deploying Cisco Web Security Appliance (WSA) to enforce acceptable use policies. Users report that some legitimate websites are being blocked incorrectly. The security team wants to allow these sites while still blocking known malware sites. Which action should the administrator take?
⚠ Common exam trap
Cisco often tests the distinction between URL filtering policies (which control access based on URL categories) and other security features like DLP or HTTPS decryption, leading candidates to confuse content inspection with access control.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create a custom URL filtering policy to allow the specific URLs.
The Cisco WSA uses URL filtering policies to control access based on URL categories and individual URLs. By creating a custom URL filtering policy that allows the specific URLs, the administrator can whitelist legitimate sites while the WSA continues to block known malware sites through its reputation-based and category-based filtering. This approach maintains security enforcement without disabling broader protections.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Create a custom URL filtering policy to allow the specific URLs.
Why this is correct
Custom URL filtering policies can whitelist specific URLs while keeping other blocking rules intact.
- ✗
Disable HTTPS decryption to bypass filtering for encrypted sites.
Why it's wrong here
Disabling decryption would not fix incorrect blocking and reduces visibility.
- ✗
Enable Data Loss Prevention (DLP) to allow the sites.
Why it's wrong here
DLP is for data loss prevention, not URL filtering exceptions.
- ✗
Increase the HTTPS decryption depth to inspect more content.
Why it's wrong here
Increasing decryption depth does not affect URL filtering exceptions.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-701 question from scratch — 978 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.