Cisco Exam 350-701 Topic 15 Question 69 Discussion

Actual exam question for Cisco's 350-701 exam

Question #: 69
Topic #: 15

An engineer enabled SSL decryption for Cisco Umbrella intelligent proxy and needs to ensure that traffic is inspected without alerting end-users. Which action accomplishes this goal?

ARestrict access to only websites with trusted third-party signed certificates.

BModify the user's browser settings to suppress errors from Cisco Umbrella.

CUpload the organization root CA to Cisco Umbrella.

DInstall the Cisco Umbrella root CA onto the user's device.

Show Suggested Answer

Suggested Answer: D

by Ernest at Apr 20, 2023, 04:11 AM

Limited Time Offer

25%

Off

Get Premium 350-701 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Reyes

1 months ago

Trying to hide SSL decryption from users? Sounds like someone's trying to pull a fast one. Option C is the way to go, but I'm keeping an eye on you!

upvoted 0 times

Renea

7 days ago

Option C is definitely the way to go to hide SSL decryption from end-users.

upvoted 0 times

...

Maryln

2 months ago

Restricting access to only trusted third-party websites? What is this, the 90s? Option C is the clear winner here.

upvoted 0 times

...

Malinda

2 months ago

Oh, man, I remember the days of having to install root CAs on every user's device. Talk about a headache! Option C is the way to go for sure.

upvoted 0 times

...

Tawna

2 months ago

I'm not sure why anyone would want to suppress errors from Cisco Umbrella. That just sounds like a recipe for disaster. Option D is the way to go.

upvoted 0 times

Lashon

2 days ago

Yes, but it will also ensure that traffic is inspected without alerting end-users.

upvoted 0 times

...

Nilsa

15 days ago

Restricting access to only websites with trusted third-party signed certificates could also work, but installing the Cisco Umbrella root CA seems like the most secure option.

upvoted 0 times

...

Charlette

15 days ago

But won't that prevent end-users from being alerted to potential security risks?

upvoted 0 times

...

Yuki

26 days ago

I agree, that way the end-users won't be alerted and the traffic can still be inspected. It's a win-win.

upvoted 0 times

...

Dalene

1 months ago

Option D is definitely the best choice. Installing the Cisco Umbrella root CA onto the user's device ensures that traffic is inspected without alerting end-users.

upvoted 0 times

...

Dorothy

1 months ago

Option D: Enable the 'Block Page Bypass' feature in the Cisco Umbrella intelligent proxy settings.

upvoted 0 times

...

Nu

2 months ago

Option C seems like the right choice here. Uploading the organization's root CA to Cisco Umbrella will allow the traffic to be inspected without any issues for the end-users.

upvoted 0 times