Implementing and Operating Cisco Security Core Technologies (SCOR) — Question 45

An organization is implementing URL blocking using Cisco Umbrella. The users are able to go to some sites but other sites are not accessible due to an error.
Why is the error occurring?

Answer options

• A. Client computers do not have an SSL certificate deployed from an internal CA server.
• B. Client computers do not have the Cisco Umbrella Root CA certificate installed.
• C. IP-Layer Enforcement is not configured.
• D. Intelligent proxy and SSL decryption is disabled in the policy.

Correct answer: B

Explanation

The correct answer is B because the Cisco Umbrella Root CA certificate is necessary for the proper functioning of SSL decryption, which allows users to access blocked sites securely. Option A is incorrect as it refers to an internal CA, which is not related to Cisco Umbrella. Option C is not the cause of the error since IP-Layer Enforcement does not directly impact SSL traffic, and option D is incorrect because if the intelligent proxy and SSL decryption were disabled, the users would not be able to access any sites, not just some.