Cisco CCNP Security Core (SCOR) 350-701Content SecurityEasy
A network administrator is configuring a Cisco Secure Web Appliance (WSA) to prevent users from accessing websites categorized as 'Gambling' or 'Malicious Sites'. Which content security feature should the administrator configure to achieve this objective?
- AApplication Visibility and Control (AVC)
- BData Loss Prevention (DLP)
- CURL Filtering
- DAnti-Malware Scanning
Show answer & explanationAnswer & explanation
Correct answer: C. URL Filtering
URL Filtering is the specific feature designed to block access to websites based on their categorization, such as 'Gambling' or 'Malicious Sites'. It allows administrators to define policies that permit or deny access to URLs based on predefined categories or custom lists.
Why the other options are wrong
- A. AVC provides granular control over applications and their features, but it doesn't primarily block access based on website categorization.
- B. DLP is used to prevent sensitive data from leaving the organization, not to block access to specific website categories.
- D. Anti-Malware Scanning primarily focuses on detecting and blocking malicious software downloads, not website categories.
URL Filtering
A content security feature that blocks or allows access to websites based on their categorization, reputation, or custom lists.
- Categorizes websites (e.g., gambling, social media, news).
- Enforces acceptable use policies.
- Protects against known malicious websites.
Memory trick: URL Filtering: 'Uniform Resource Locator' means 'Universal Restriction Logic' for web access.