Courseiva
← 350-701
Full test
mediumMultiple ChoiceObjective-mapped

350-701 Practice Question: Refer to the exhibit

Exhibit

Refer to the exhibit.

! --- show running-config excerpt from WSA ---
! access policy: Policy_A
! ...
! objects:
! custom-url-category: trusted_sites
! 
! file-type-filter:
!   file-type-category: executables
!   action: monitor
!   include-subcategories: true
! 
! access-policy: Policy_A
!   url-category: trusted_sites
!   file-reputation: use-default
!   file-type-filter: executables
!   action: allow
! ...

Refer to the exhibit. The engineer configured a file type filter for executables on access policy Policy_A. However, .exe files from trusted_sites are still being allowed. What is the most likely reason for this behavior?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

The file type filter action is set to 'monitor' instead of 'block'.

The file type filter action is set to 'monitor' (which only logs) instead of 'block'. The access policy action is 'allow', so without a block action in the file type filter, executables are allowed. Option A is wrong because the file type filter is applied to Policy_A. Option B is wrong because the filter is on executables category, not URL. Option D is wrong because policy order is not shown to be an issue.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    The file type filter is applied to the wrong access policy.

    Why it's wrong here

    The exhibit shows the file type filter is applied to Policy_A, so it is correctly applied.

  • ✗

    The URL category for trusted_sites is blocking the file type filter from being evaluated.

    Why it's wrong here

    URL categories and file type filters are independent; the filter should still be evaluated unless explicitly excluded.

  • ✓

    The file type filter action is set to 'monitor' instead of 'block'.

    Why this is correct

    A 'monitor' action only logs and does not block; to block, the action must be set to 'block'.

  • ✗

    The access policy order is incorrect; a less specific policy is matching before Policy_A.

    Why it's wrong here

    Policy order can affect matching, but the exhibit does not indicate any ordering issue; the given policy is matching the traffic.

About these practice questions

This 350-701 question is part of Courseiva's 978-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.