Network And Cloud Security

Which THREE items must be configured to successfully implement an Umbrella SIG tunnel?

Which Cisco Umbrella feature allows you to categorize destinations and apply custom block or allow lists?

Which THREE pieces of information are displayed in the Umbrella 'Activity Search' report?

You are deploying Umbrella Virtual Appliances (VAs) in a local Active Directory environment. What is the primary purpose of the VA in this deployment?

Which TWO components are essential for a complete Cisco Umbrella deployment on end-user laptops?

Which THREE components are critical for a successful cloud network segmentation strategy?

You want to restrict access to specific cloud apps (e.g., Dropbox). Which Umbrella feature is used?

You are analyzing a 'Domain Blocked' event in Umbrella. The explanation says 'Proxy'. What does this imply?

You are troubleshooting an Umbrella SIG tunnel connection. The IPsec tunnel is up, but users report timeouts. What is the most likely cause if the tunnel MTU is not adjusted correctly?

When configuring a SIG tunnel in Umbrella, which protocol is typically used to establish the encrypted connection between the branch office firewall and the Umbrella data center?

In Cisco Secure Access, you need to configure a Global Policy to block access to specific cloud applications based on risk levels. Where do you define this logic?

When migrating from an explicit proxy to the Umbrella SIG, what is the primary challenge for legacy applications?

What does the 'Umbrella dashboard' allow you to do regarding DNS security?

You have a branch office with a static IP. You want to secure it without a local virtual appliance. What is the best method?

A user is experiencing 'SSL Certificate Mismatch' errors. You suspect it is caused by the Umbrella proxy. How do you resolve this permanently?

Which THREE items are necessary for troubleshooting a failed 'Umbrella AD Connector' sync?

Which TWO features are part of the Cisco Secure Access suite for remote users?

What is the primary benefit of the Cisco Umbrella 'Global Network' architecture?

Which TWO pieces of information are required for a 'Network Identity' in Umbrella?

You notice that some of your users are bypassing the Umbrella SIG by using a personal VPN. What is the most effective way to prevent this with Cisco products?

A user on a corporate laptop is unable to reach a specific SaaS application that is blocked by the Cisco Secure Access SIG. How can you verify the specific rule causing this block?

You are implementing Cisco Secure Access and want to use PAC files for browsers. Where must the PAC file be hosted for automatic proxy configuration?

Which TWO conditions must be met for a user to be effectively managed by the Umbrella Roaming Client?

Where do you manage the Umbrella Roaming Client deployment configuration?

When troubleshooting DNS queries in Umbrella, which command is most useful on a local machine to see if it is using the Umbrella resolvers?

Which THREE types of traffic are typically protected by a SIG?

You are setting up cloud network segmentation. In the context of Secure Access, how are groups of resources isolated from each other?

You are integrating Cisco Secure Access with an IdP. What protocol is used to facilitate this authentication?

Which THREE actions can be taken in an Umbrella policy based on content categories?

What is the purpose of 'Internal Networks' in the Umbrella dashboard?

You are configuring Cisco Umbrella to protect roaming users. Which component must be installed on the endpoint to ensure consistent policy enforcement when the user is off-VPN?

Which component is required to enable Active Directory integration with Umbrella for user-level reporting?

When deploying the Cisco Secure Access AnyConnect module, what is the primary role of the Umbrella DNS module within it?

An administrator is configuring Cisco Umbrella for a branch office and needs to ensure that all DNS requests are inspected for malicious domains without requiring a client-side agent. Which configuration approach should the administrator implement?

An organization is migrating to a Secure Internet Gateway (SIG) architecture. They currently have an on-premises firewall blocking all traffic except for specific ports. What is the recommended method to forward traffic to the SIG while maintaining existing security policy consistency?

Which TWO logging methods can be used to export Umbrella logs for SIEM analysis?

Which component is required to allow Umbrella to perform SSL decryption on web traffic?

When using Umbrella's 'Selective Proxy', how is the determination made to route traffic through the proxy vs. direct to destination?

Which TWO methods can be used to identify internal clients in Cisco Umbrella reports?

You have a requirement to perform 'File Analysis' on downloads. Which Umbrella product component must be enabled?

Which TWO settings must be correctly configured to ensure that Cisco Secure Access provides effective decryption and inspection of HTTPS traffic?

Which TWO of the following are primary benefits of Cisco Umbrella DNS-layer security?

You are troubleshooting a scenario where users are unable to access a specific internal cloud resource after migrating to Cisco Secure Access. The traffic is being blocked by a default policy. How should you modify the traffic flow to ensure internal traffic stays off the SIG?

You want to ensure that users are warned before visiting a newly registered domain. Which feature in Cisco Umbrella handles this?

What is the role of a 'Policy' in Cisco Umbrella?

Which THREE items are considered primary components of the Cisco Umbrella 'Identity' structure when creating security policies?

Which method is the most secure way to authenticate users for Cisco Secure Access?

In Cisco Umbrella, which component is used to associate internal IP addresses with Active Directory user identities for granular policy reporting?

In Secure Access, how are 'Traffic Forwarding' profiles used?

What is the function of an Umbrella 'Integrations' key?

You are implementing Cisco Secure Access and need to configure a Global Policy that restricts access to unsanctioned SaaS applications based on their risk score. Where should this policy be applied in the Secure Access dashboard?

Which report in Cisco Umbrella provides the most direct view of security threats identified in your environment?

You need to ensure that all web traffic from a branch office is inspected by the Umbrella SIG. Which configuration step is mandatory on your perimeter router?

A company wants to prevent users from bypassing security policies by using unauthorized VPNs or proxies. Which feature in Cisco Umbrella should be enabled to mitigate this risk?

Which THREE actions are required when configuring a new IPsec tunnel for the Cisco SIG (Secure Internet Gateway)?

Which Cisco Umbrella report provides the most granular visibility into the specific security categories triggered by user traffic?

What is the main advantage of using a Secure Internet Gateway (SIG) over a traditional on-premises firewall?

You are seeing 'SSL Inspection Error' in your logs. What is the most likely cause?

Which THREE factors are evaluated by the Umbrella policy engine when processing a DNS request?