hardMultiple ChoiceObjective-mapped
350-701 Practice Question: A user in the Engineering group reports that they…
Exhibit
Refer to the exhibit.
ciscowsa# show accesspolicy detail PolicyName: Engineering
Policy: Engineering
Identification Profiles: Engineering_IP
User Identification: Transparent
Web Reputation:
Action: Block
Threshold: -6.0
URL Filtering:
Category: Malware
Action: Block
Category: Phishing
Action: Block
Category: Social Networking
Action: Monitor
Malware Scanning:
Action: Scan
File Types: exe, dll, zip, jar
HTTPS Decryption:
Action: Decrypt
Bypass Categories: Financial, HealthA user in the Engineering group reports that they cannot access a banking website (https://www.examplebank.com). The website is categorized as 'Financial' by the WSA. Based on the exhibit, what is the most likely cause?
⚠ Common exam trap
Cisco often tests the distinction between URL category actions (Allow, Block, Monitor) and Web Reputation thresholds, where candidates mistakenly think a category like 'Financial' being allowed means the site is accessible, ignoring that a low reputation score can override category-based policies.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The Web Reputation threshold of -6.0 is blocking the site due to a low reputation score
The exhibit shows a Web Reputation threshold of -6.0, meaning any website with a reputation score lower than -6.0 will be blocked. The banking site 'examplebank.com' likely has a low reputation score (e.g., due to being newly registered or hosting malicious content), causing it to fall below the threshold and be blocked. This is the most direct cause because the WSA applies reputation-based filtering before other policies, and the user's inability to access the site aligns with a reputation block rather than a category or scanning issue.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The Malware Scanning action is set to 'Scan' but blocks the site
Why it's wrong here
Scan action does not block; it scans and then allows.
- ✗
The user identification is not configured correctly
Why it's wrong here
Identification is set to Transparent, which should work.
- ✓
The Web Reputation threshold of -6.0 is blocking the site due to a low reputation score
Why this is correct
If the site's reputation is below -6.0, it will be blocked regardless of URL filtering.
- ✗
The Social Networking category is set to 'Monitor' and is blocking the site
Why it's wrong here
Monitor does not block.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-701 question from scratch — 978 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.