Exam 200-201 topic 1 question 270 discussion

Shouldn't this be D. Proxy ? Since it contains entries like "TCP_MISS" and "DIRECT"

"TCP_MISS" is proxy a specific phrase

Answer is correct. Proxy log will not show file and the extension ID.

This log is from a Cisco WSA (web security appliance) - a web proxy The correct answer is D

so, the log here in my previous comment is the same as the log in the question.

D- Proxy According to Cisco: Web Proxy Information in Access Log Files: Access log files provides a descriptive record of all Web Proxy filtering and scanning activity. Access log file entries display a record of how the appliance handled each transaction. The following text is an example access log file entry for a single transaction: 1278096903.150 97 172.xx.xx.xx TCP_MISS/200 8187 GET http://my.site.com/ - DIRECT/my.site.com text/plain DEFAULT_CASE_11-PolicyGroupName-Identity- OutboundMalwareScanningPolicy-DataSecurityPolicy-ExternalDLPPolicy-RoutingPolicy <IW_comp,6.9,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-",""-",-,-,IW_comp,-,"-","-", "Unknown","Unknown","-","-",198.34,0,-,[Local],"-",37,"W32.CiscoTestVector",33,0, "WSA-INFECTED-FILE.pdf","fd5ef49d4213e05f448f11ed9c98253d85829614fba368a421d14e64c426da5e”.