Cisco Certified Internetwork Expert (CCIE) Practice Test

Which two statements about Cisco URL Filtering on Cisco IOS Software are true? (Choose two)

1. By default, it allows all URLs when the connection to the filtering server is down.

2. It supports Websense and N2H2 filtering at the same time.

3. It supports local URL lists and third-party URL filtering servers.

4. By default, it uses ports 8 and 22.

The correct answer is: It supports local URL lists and third-party URL filtering servers.

The statement regarding Cisco URL Filtering supporting local URL lists and third-party URL filtering servers is accurate because Cisco IOS Software has been designed to provide flexibility in implementing URL filtering by allowing administrators to use both locally-defined URL criteria as well as integrating with external filtering services. This capability enables organizations to tailor their internet usage policies effectively by combining internal custom rules with external ones from third-party vendors, thus enhancing security and compliance with organizational standards. Local URL lists allow for quick and specific implementation of rules directly on the device without reliance on external services, while third-party filtering servers offer more extensive databases and likely more sophisticated filtering capabilities. This combination allows for a comprehensive approach to managing web traffic. The other options do not support the requirements of effective Cisco URL filtering. For instance, the default behavior when the connection to a filtering server is down is not to allow all URLs, but rather to potentially block filtering entirely, which is a security measure. Moreover, Cisco URL filtering does not support simultaneous use of Websense and N2H2; it is designed to integrate primarily with one filtering server at a time. Lastly, the default ports for URL filtering typically align with standard web traffic (like port 80 for HTTP) rather than ports 8 and 22, which are associated