Exam 350-701 topic 1 question 213 discussion

I’d say C, intelligent proxy

C. Configure the intelligent proxy. Cisco Umbrella's intelligent proxy allows you to enforce security policies for web traffic based on various criteria, such as destination domain, IP address, or URL category. To prevent malicious content downloads, the organization can configure the intelligent proxy to block access to suspicious domains, while allowing normal web traffic. This can be done by creating a security policy that specifies which domains should be blocked and which should be allowed. Note: The intelligent proxy is a feature in Cisco Umbrella that can be used to enforce security policies for web traffic. Other Umbrella features, such as destination block lists and application block lists, can also be used to prevent malicious activity. However, the intelligent proxy is the best option for this specific task, as it allows you to enforce security policies based on domain, IP, or URL category

The intelligent proxy helps in inspecting and analyzing web traffic but doesn't directly block access to domains. It may be useful for deeper inspection but isn't the primary method to block suspicious domains.

C. Configure the intelligent proxy.

This is a standard destination list category that can be accomplished with simple DNS forwarding.

C - it will still allow normal web traffic

I'm going with A because it specifies that it only wants to perform that action for malicious domains, which will be identified by a destination list. Intelligent proxy Inspection of files would apply to all domains

C is the answer.

The intelligent proxy is the ability for Umbrella to intercept and proxy requests for malicious files embedded within certain so-called "grey" domains. Some websites, especially those with large user communities or the ability to upload and share files, have content that most users want to access while also posing a risk because of the possibility of hosting malware. Administrators don't want to block access to the whole "grey" domain for everyone but they also don't want your users to access files that could harm their computers or compromise company data.

The Answer is C

I’d say C The intelligent proxy is the ability for Umbrella to intercept and proxy requests for malicious files embedded within certain so-called "grey" domains. Some websites, especially those with large user communities or the ability to upload and share files, have content that most users want to access while also posing a risk because of the possibility of hosting malware. Administrators wouldn't want to block access to the whole "grey" domain for everyone but they also don't want your users to access files that could harm their computers, compromise your company data or worse!

I would say C: How Cisco umbrella will manage traffic to a risky domain? With the intelligent proxy, if a site is considered potentially suspicious or could host malicious content, Umbrella returns the intelligent proxy's IP address. The request to that domain is then routed through our cloud-based secure gateway, and malicious content is found and stopped before it's sent to you.

I'd go with C here

Support for the intelligent proxy is deprecated and only available for legacy deployments of the MSP console. The intelligent proxy is not available for new deployments of the MSP console.

i Passed and i Used [ C. Configure the intelligent proxy. ]

A with Cisco Umbrella there is no intelligent proxy like thing.

I would choose C: A. Destination block lists - no (we cannot specify all the suspicious domains on a list) B. Configure application block lists - obviously not related C. Configure the intelligent proxy - yes - it is used to decrypt & monitor the traffic for suspicious domains & drop if needed D. Set content settings to High - no, because it would also block time wasting destinations such as social media, ect