350-701 Content Security Practice Question
A company is using Cisco WSA with explicit proxy mode. The security team wants to enforce HTTPS inspection for all web traffic from the finance department to detect malicious content in encrypted connections. However, they want to exclude traffic to financial institutions' websites due to compliance reasons. Which configuration approach should be used to achieve this?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure a policy for the finance department with HTTPS inspection enabled and add a bypass rule for the Financial Services URL category.
In WSA, you can configure bypass rules for specific URL categories or destinations to exclude them from HTTPS inspection while still inspecting other traffic.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Configure a policy for the finance department with HTTPS inspection enabled and add a bypass rule for the Financial Services URL category.
Why this is correct
This allows inspection for the finance department while bypassing for financial institutions.
- ✗
Disable HTTPS inspection globally and enable it only for the finance department using a custom policy.
Why it's wrong here
Disabling globally would affect all users; the requirement is to inspect finance but exclude specific sites.
- ✗
Configure SSL/TLS decryption on the firewall instead of the WSA.
Why it's wrong here
The question specifies using Cisco WSA, not the firewall.
- ✗
Use transparent proxy mode with WCCP redirect to bypass inspection for financial sites.
Why it's wrong here
Transparent proxy mode does not directly solve the bypass requirement; bypass is done via policy rules.
Go deeper
Related to this question
About these practice questions
This 350-701 question is part of Courseiva's 978-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.