Implementing and Operating Cisco Security Core Technologies (SCOR) — Question 399

An engineer enabled SSL decryption for Cisco Umbrella intelligent proxy and needs to ensure that traffic is inspected without alerting end-users. Which action accomplishes this goal?

Answer options

• A. Restrict access to only websites with trusted third-party signed certificates.
• B. Modify the user's browser settings to suppress errors from Cisco Umbrella.
• C. Upload the organization root CA to Cisco Umbrella.
• D. Install the Cisco Umbrella root CA onto the user's device.

Correct answer: D

Explanation

Installing the Cisco Umbrella root CA onto the user's device allows the SSL decryption process to function without generating certificate errors for the end-users. Options A and C do not prevent user alerts, while option B only suppresses errors instead of addressing the root cause of SSL inspection issues.