Chapter 14. URL Filtering

Question 1

1.Which of the following statements is true about the URL lookup?

A. A threat defense, by itself, can resolve the category of all URLs on the Internet.

B. The management center, by itself, can resolve the category of all URLs on the Internet.

C. Both the management center and threat defense can collectively resolve URLs on the Internet.

D. Neither the management center nor the threat defense can resolve URLs independently; they send all the URLs to the Internet to determine the latest categorizations.

Answer 1

C. Both the management center and threat defense can collectively resolve URLs on the Internet.

Question 2

2.Which of the following statements about URL database updates is true?

A. Secure Firewall can download the new URLs directly from the Cisco cloud.

B. The URL Filtering database can be different in different Secure Firewall models, depending on their available resources.

C. The management center communicates with Cisco Cloud Services automatically every 30 minutes to check for new updates.

D. All of these answers are correct.

Answer 2

D. All of these answers are correct.

Question 3

3.Which of the following licenses is necessary to block a URL based on its category and reputation?

A. Threat

B. URL

C. Malware

D. Both Threat and URL

Answer 3

D. A threat license is a prerequisite to enable URL Filtering. In addition, a URL Filtering license is necessary to deploy an access control rule with any URL-based conditions.

Question 4

4.When enabling URL Filtering on Secure Firewall, which of the following could be one of the best practices to follow?

A. Enable a health module for URL Filtering.

B. Enable URL Filtering and automatic updates for Cisco Cloud Services.

C. Avoid a smaller cache for URLs.

D. All of these answers are correct.

Answer 4

D. All of these answers are correct. These options can be considered the best practices. Enabling a health module for URL Filtering can confirm the successful downloading and deployment of URL datasets. Enabling automatic updates for URL Filtering ensures that Secure Firewall’s URL database is up to date. Avoiding a smaller cache for URLs can make sure that the system is not always staying busy with frequent queries to the Cisco Cloud.

Question 5

5.Which of the following is true about uncategorized URLs?

A. A threat defense can hold uncategorized traffic in the buffer if the URL lookup is pending.

B. Cloud lookup of uncategorized URLs can lead to performance degradation if the management center is not configured properly.

C. Uncategorized URLs may be categorized if the management center is able to communicate with Cisco Cloud Services.

D. All of these answers are correct.

Answer 5

D. All of these answers are correct.