Exam 350-701 topic 1 question 303 discussion

I will go with A.guest If transparent authentication fails, you can configure how to handle the transaction: you can grant the user guest access, or you can force an authentication prompt to appear to the user. https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa_12-5/User-Guide/b_WSA_UserGuide_12_5/b_WSA_UserGuide_11_7_chapter_0101.html

The ultimate goal is to ensure that the network is protected and that unauthorized users are not able to access sensitive information or engage in activities that could compromise its security.

About Failed Authentication Users may be blocked from the web due to authentication failure for the following reasons: Client/user agent limitations. Some client applications may not properly support authentication. You can bypass authentication for these clients by configuring Identification Profiles that do not require authorization and basing their criteria on the clients (and, optionally, on the URLs they need to access). Authentication service is unavailable. An authentication service might be unavailable due to network or server issues. You can choose to allow unauthenticated traffic in this circumstance. Invalid credentials. Some users may be unable to supply valid credentials for proper authentication (for example, visitors or users awaiting credentials). You can choose to grant these users limited access to the web. https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa-15-1/user-guide/swa-userguide-15-1/m-authentication-and-authorization.html#con_1350892

Answer a

So guys, you are gonna need to read this document, the answer is there, and it correlates with A. Transparent Auth = users don't need to type in username and password. They authenticate with a certificate. If that fails, you can grant guest access or you can choose to prompt for username+PW. https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa_12-5/User-Guide/b_WSA_UserGuide_12_5/b_WSA_UserGuide_11_7_chapter_0101.html

for anyone who gets confused. we don't care if it has options or not, just what the default option is as we don't know what settings have been used. Its C as by default it will block unless you specify

About Failed Authentication: Users may be BLOCKED from the web due to authentication failure for the following reasons: Client/user agent limitations... Authentication service is unavailable... Invalid credentials. Some users may be unable to supply valid credentials for proper authentication (for example, visitors or users awaiting credentials). You CAN choose to grant these users limited access to the web. https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa_12-5/User-Guide/b_WSA_UserGuide_12_5/b_WSA_UserGuide_11_7_chapter_0101.html#con_1350894

If transparent authentication fails, you can configure how to handle the transaction: you can grant the user guest access, or you can force an authentication prompt to appear to the user. When an end user is shown an authentication prompt due to failed transparent user identification, and the user then fails authentication due to invalid credentials, you can choose whether to allow the user guest access.

I want to go with B: The WSA provides options to configure what type of access is granted when transparent authentication fails. By default, the WSA allows limited Internet access to the user, which includes basic web browsing functionality but with restricted capabilities. The specific restrictions can be defined by the administrator and may include limitations on certain websites or protocols. Option A, guest access, typically refers to a specific access level or network segment provided for guest users, usually with limited privileges and restricted access to internal resources. It is not directly related to the outcome of a transparent authentication failure.

A is correct.

If you read the link : https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-0/user_guide/b_WSA_UserGuide/b_WSA_UserGuide_chapter_01001.html When an end user is shown an authentication prompt due to failed transparent user identification, and the user then fails authentication due to invalid credentials, you can choose whether to allow the user guest access.

https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-0/user_guide/b_WSA_UserGuide/b_WSA_UserGuide_chapter_01001.html Invalid credentials. Some users may be unable to supply valid credentials for proper authentication (for example, visitors or users awaiting credentials). You can choose to grant these users limited access to the web.

Guys you don't get guest access. There is no way to give GUEST access on WSA. Its called LIMITED access

If transparent authentication fails, you can configure how to handle the transaction: you can grant the user guest access, or you can force an authentication prompt to appear to the user. https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-0/user_guide/b_WSA_UserGuide/b_WSA_UserGuide_chapter_01001.html

A or C

https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11- 7/user_guide/b_WSA_UserGuide_11_7/b_WSA_UserGuide_11_7_chapter_01001.html