Network And Cloud Security

Which Cisco Umbrella feature allows you to categorize destinations and apply custom block or allow lists?

Which THREE pieces of information are displayed in the Umbrella 'Activity Search' report?

You are deploying Umbrella Virtual Appliances (VAs) in a local Active Directory environment. What is the primary purpose of the VA in this deployment?

Which THREE components are critical for a successful cloud network segmentation strategy?

A security architect is designing a Cisco Secure Access deployment for a hybrid workforce. The requirement is to inspect TLS traffic for SaaS applications while preserving privacy for banking and healthcare categories, and to avoid breaking certificate-pinned applications. Which combination of Secure Access features should be used?

You want to restrict access to specific cloud apps (e.g., Dropbox). Which Umbrella feature is used?

You are analyzing a 'Domain Blocked' event in Umbrella. The explanation says 'Proxy'. What does this imply?

You are troubleshooting an Umbrella SIG tunnel connection. The IPsec tunnel is up, but users report timeouts. What is the most likely cause if the tunnel MTU is not adjusted correctly?

In Cisco Secure Access, you need to configure a Global Policy to block access to specific cloud applications based on risk levels. Where do you define this logic?

When migrating from an explicit proxy to the Umbrella SIG, what is the primary challenge for legacy applications?

What does the 'Umbrella dashboard' allow you to do regarding DNS security?

You have a branch office with a static IP. You want to secure it without a local virtual appliance. What is the best method?

A user is experiencing 'SSL Certificate Mismatch' errors. You suspect it is caused by the Umbrella proxy. How do you resolve this permanently?

Which THREE items are necessary for troubleshooting a failed 'Umbrella AD Connector' sync?

Which TWO features are part of the Cisco Secure Access suite for remote users?

What is the primary benefit of the Cisco Umbrella 'Global Network' architecture?

Which TWO pieces of information are required for a 'Network Identity' in Umbrella?

You notice that some of your users are bypassing the Umbrella SIG by using a personal VPN. What is the most effective way to prevent this with Cisco products?

A user on a corporate laptop is unable to reach a specific SaaS application that is blocked by the Cisco Secure Access SIG. How can you verify the specific rule causing this block?

You are implementing Cisco Secure Access and want to use PAC files for browsers. Where must the PAC file be hosted for automatic proxy configuration?

Which TWO conditions must be met for a user to be effectively managed by the Umbrella Roaming Client?

Where do you manage the Umbrella Roaming Client deployment configuration?

When troubleshooting DNS queries in Umbrella, which command is most useful on a local machine to see if it is using the Umbrella resolvers?

Which THREE types of traffic are typically protected by a SIG?

You are setting up cloud network segmentation. In the context of Secure Access, how are groups of resources isolated from each other?

You are integrating Cisco Secure Access with an IdP. What protocol is used to facilitate this authentication?

What is the purpose of 'Internal Networks' in the Umbrella dashboard?

You are configuring Cisco Umbrella to protect roaming users. Which component must be installed on the endpoint to ensure consistent policy enforcement when the user is off-VPN?

Which component is required to enable Active Directory integration with Umbrella for user-level reporting?

When deploying the Cisco Secure Access AnyConnect module, what is the primary role of the Umbrella DNS module within it?

An organization is migrating to a Secure Internet Gateway (SIG) architecture. They currently have an on-premises firewall blocking all traffic except for specific ports. What is the recommended method to forward traffic to the SIG while maintaining existing security policy consistency?

Which TWO logging methods can be used to export Umbrella logs for SIEM analysis?

Which component is required to allow Umbrella to perform SSL decryption on web traffic?

When using Umbrella's 'Selective Proxy', how is the determination made to route traffic through the proxy vs. direct to destination?

Which TWO methods can be used to identify internal clients in Cisco Umbrella reports?

Which TWO settings must be correctly configured to ensure that Cisco Secure Access provides effective decryption and inspection of HTTPS traffic?

Which TWO of the following are primary benefits of Cisco Umbrella DNS-layer security?

You are troubleshooting a scenario where users are unable to access a specific internal cloud resource after migrating to Cisco Secure Access. The traffic is being blocked by a default policy. How should you modify the traffic flow to ensure internal traffic stays off the SIG?

You want to ensure that users are warned before visiting a newly registered domain. Which feature in Cisco Umbrella handles this?

What is the role of a 'Policy' in Cisco Umbrella?

Which THREE items are considered primary components of the Cisco Umbrella 'Identity' structure when creating security policies?

Which method is the most secure way to authenticate users for Cisco Secure Access?

In Secure Access, how are 'Traffic Forwarding' profiles used?

What is the function of an Umbrella 'Integrations' key?

You are implementing Cisco Secure Access and need to configure a Global Policy that restricts access to unsanctioned SaaS applications based on their risk score. Where should this policy be applied in the Secure Access dashboard?

Which report in Cisco Umbrella provides the most direct view of security threats identified in your environment?

You need to ensure that all web traffic from a branch office is inspected by the Umbrella SIG. Which configuration step is mandatory on your perimeter router?

Which Cisco Umbrella report provides the most granular visibility into the specific security categories triggered by user traffic?

A security analyst is reviewing Cisco Umbrella logs to investigate a potential malware infection. The analyst wants to identify which internal host attempted to resolve a known malicious domain. Which log type in Cisco Umbrella should the analyst examine?

What is the main advantage of using a Secure Internet Gateway (SIG) over a traditional on-premises firewall?

You are seeing 'SSL Inspection Error' in your logs. What is the most likely cause?

Which THREE factors are evaluated by the Umbrella policy engine when processing a DNS request?