ExamGecko
Question list
Search
Search

Question 425 - 350-701 discussion

Report
Export

An engineer needs to configure an access control policy rule to always send traffic for inspection without using the default action. Which action should be configured for this rule?

A.

monitor

Answers
A.

monitor

B.

allow

Answers
B.

allow

C.

block

Answers
C.

block

D.

trust

Answers
D.

trust

Suggested answer: B

Explanation:

https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc-config- guide-v623/access_control_using_intrusion_and_file_policies.html#:~:text=File%20Policies- ,Access%20Control%20Traffic%20Handling%20with%20Intrusion%20and%20File%20Policies,- The%20following%20diagram the first three access control rules in the policy---Monitor, Trust, and Block---cannot inspect matching traffic. Monitor rules track and log but do not inspect network traffic, so the system continues to match traffic against additional rules to determine whether to permit or deny it https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc-config- guide-v623/access_control_rules.html#:~:text=Rule%20Blocking%20Actions- ,Access%20Control%20Rule%20Allow%20Action,network%20discovery%20policy%3B%20additionally%2 C%20application%20discovery%20is%20limited%20for%20encrypted%20sessions.,-Related%20Concepts


asked 10/10/2024
Bill May
45 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first