An engineer recently completed the system setup on a Cisco WSA. Which URL information does the system send to SensorBase Network servers?
An engineer recently completed the system setup on a Cisco WSA. Which URL information does the system send to SensorBase Network servers?
When a system is set up on a Cisco WSA (Web Security Appliance), the default behavior for sharing information with the SensorBase Network is to send summarized server-name information and MD5-hashed path information. This is part of the 'Limited' participation level, which is the default setting unless 'Standard' participation is explicitly configured. In the standard participation level, the complete URL without obfuscation would be sent, but the question does not indicate that such a level was selected.
A is correct - SensorBase is turned on and set to “standard” by default: Limited. Basic participation summarizes server name information and sends MD5-hashed path segments to the SensorBase Network servers. Standard. Enhanced participation sends the entire URL with unobfuscated path segments to the SensorBase Network servers. This option assists in providing a more robust database, and continually improves the integrity of Web Reputation Scores.
Standard SensorBase Network Participation is enabled by default during system setup. Standard. Enhanced participation sends the entire URL with unobfuscated path segments to the SensorBase Network servers. This option assists in providing a more robust database, and continually improves the integrity of Web Reputation Scores.
Correct answer is D. Yes, SensorBase is turned on by default but the engineer choose the participation level "Limited" NOT "Standard". The key flaw in proposed answer A is the keyword “without.” Cisco guide description of participation level "Standard": Enhanced participation sends the entire URL with (!!!) unobfuscated path segments to the SensorBase Network servers. Cisco guide description of participation level "Limit": Basic participation summarizes server name information and sends MD5-hashed path segments to the SensorBase Network servers. https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa_14-1/User-Guide/b_WSA_UserGuide_14_01/b_WSA_UserGuide_11_7_chapter_00.html
STANDARD SensorBase Network Participation is enabled by default during system setup.
Would have to agree with MPoels on this one and select D. Yes, STANDARD SensorBase Network Participation is enabled by default during system setup.. But as MPoels also pointed out, the wording of Option A makes it incorrect. Maybe it's a typo here and it's worded differently on the actual exam..... For that reason, I'm sticking with D and implying that the engineer configured the "Limited" Participation Level as opposed to the "Standard".
https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa_14-1/User-Guide/b_WSA_UserGuide_14_01/b_WSA_UserGuide_11_7_chapter_00.html?bookSearch=true