easyMultiple ChoiceObjective-mapped
Cisco WSA Block URL Category Action
A network administrator wants to block access to a specific URL category on the Cisco WSA but allow access to all other categories. Which action should be taken in the Access Policy?
Quick Answer
The answer is to set the action to 'Block' for the specific URL category within the Access Policy. This is correct because the Cisco WSA processes URL categories in a hierarchical order of precedence, and explicitly configuring a 'Block' action for a given category overrides the default 'Allow' behavior for all other categories, effectively denying HTTP/HTTPS requests that match only that category while leaving the rest unrestricted. On the Cisco SCOR 350-701 exam, this concept tests your understanding of granular policy enforcement versus broad allow/deny rules, often appearing as a distractor where candidates mistakenly choose 'Monitor' or 'Warn' instead of 'Block'. A common trap is assuming you must create a custom policy or use a URL filter group, but the direct action on the category itself is sufficient. Memory tip: think "Block the one, allow the many"—the WSA’s default stance is permissive unless you explicitly deny a specific category.
⚠ Common exam trap
Cisco often tests the distinction between 'Block' and 'Warn' actions, where candidates mistakenly think 'Warn' denies access, but it actually allows access after user acknowledgment, making 'Block' the only true denial action.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Set the action to 'Block' for the category
To block access to a specific URL category while allowing all others, the Access Policy must set the action for that category to 'Block'. The Cisco WSA evaluates URL categories in order of precedence, and a 'Block' action explicitly denies HTTP/HTTPS requests matching that category, while all other categories default to 'Allow' unless otherwise configured.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Set the action to 'Monitor' for the category
Why it's wrong here
Monitor only logs, does not block.
- ✗
Set the action to 'Redirect' for the category
Why it's wrong here
Redirect sends to a custom page but does not block.
- ✗
Set the action to 'Warn' for the category
Why it's wrong here
Warn displays a warning but allows the user to proceed.
- ✓
Set the action to 'Block' for the category
Why this is correct
Block denies access to the category.
Go deeper
Related to this question
About these practice questions
This 350-701 question is part of Courseiva's 978-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on 350-701
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A user in the marketing group reports that they cannot access twitter.com. The access policy summary is shown in the exhibit. What is the most likely reason?
medium- A.The default policy is blocking the site because Marketing-Policy is set to Monitor only.
- B.The access policy has a time-based restriction that blocks social media during work hours.
- C.The marketing group is not assigned to the Marketing-Policy.
- ✓ D.The Social Networking category is set to Block in the Marketing-Policy.
Why D: The exhibit shows that the Marketing-Policy has the Social Networking category set to Block. Since twitter.com is classified under Social Networking, this action explicitly denies access for users assigned to that policy, overriding any other settings.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.