easyMultiple ChoiceObjective-mapped
350-701 Practice Question: Block the download of executable files (.exe) via…
An administrator wants to block the download of executable files (.exe) via HTTP using Cisco WSA. Which approach is most effective?
⚠ Common exam trap
Cisco often tests the distinction between content filtering (blocking by file type) and security scanning (detecting threats), leading candidates to mistakenly choose Anti-Malware scanning when the goal is to block all executable downloads regardless of maliciousness.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create a URL filtering policy with action 'Block' for the category 'Executable Files'
Cisco WSA's URL filtering policies include a predefined content category called 'Executable Files' that specifically targets file extensions like .exe, .dll, and .msi. By setting the action to 'Block' for this category, the administrator can prevent HTTP downloads of executable files without affecting other traffic. This is the most direct and effective method as it operates at the application layer, inspecting the URL path for file extensions.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable Anti-Malware scanning for executables
Why it's wrong here
Anti-Malware scans but does not block by file type alone; it only blocks if malware is detected.
- ✗
Configure a Web Reputation policy to block low-reputation sites
Why it's wrong here
Web Reputation blocks based on site reputation, not file type.
- ✓
Create a URL filtering policy with action 'Block' for the category 'Executable Files'
Why this is correct
WSA's URL filtering can block based on MIME type of file downloads.
- ✗
Use a PAC file to bypass the proxy for executable downloads
Why it's wrong here
PAC files reroute traffic, not block content.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-701 question from scratch — 978 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.