Cisco Exam 350-701 Topic 5 Question 90 Discussion

Actual exam question for Cisco's 350-701 exam

Question #: 90
Topic #: 5

What is the default action before identifying the URL during HTTPS inspection in Cisco Secure Firewall Threat Defense software?

Areset

Bbuffer

Cpass

Ddrop

Show Suggested Answer

Suggested Answer: C

Before identifying the URL during HTTPS inspection in Cisco Secure Firewall Threat Defense software, the default action is to 'pass.' This means that the traffic is allowed through without inspection until the URL can be identified, at which point appropriate security policies can be applied based on the URL categorization and reputation.

by Rusty at Jun 24, 2024, 08:47 AM

Limited Time Offer

25%

Off

Get Premium 350-701 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Scarlet

9 months ago

I think resetting the connection would be a safer default action.

upvoted 0 times

...

Willow

10 months ago

But wouldn't dropping the connection be too harsh?

upvoted 0 times

...

Herminia

10 months ago

I believe it's to drop.

upvoted 0 times

...

Willow

10 months ago

I think the default action is to pass.

upvoted 0 times

...

Melissa

10 months ago

I don't know, but I bet the person who wrote this question is a real HTTPS ninja. They're probably sipping on a cup of Earl Grey while chuckling at our attempts to outsmart them.

upvoted 0 times

Yuki

9 months ago

C) pass

upvoted 0 times

...

Selma

10 months ago

A) reset

upvoted 0 times

...

Tamar

10 months ago

D) drop, for sure. You can't just let unidentified HTTPS traffic through, that's like opening the door to all kinds of security risks. Drop it and let the admins sort it out later.

upvoted 0 times

...

Douglass

10 months ago

Hmm, I'm going with B) buffer. That way, the traffic can be held while the firewall tries to figure out what's going on. Dropping or passing it right away seems a bit risky.

upvoted 0 times

Delila

10 months ago

I agree, but I still think B) buffer could be a good choice too.

upvoted 0 times

...

Ciara

10 months ago

I think C) pass would be the safest option.

upvoted 0 times

...

Germaine

10 months ago

C) pass seems like the right choice. I mean, if you can't identify the URL, why would you want to drop the traffic? Passing it through seems like the logical default action.

upvoted 0 times

...

Yuki

11 months ago

I think the answer is D) drop. It makes sense that the default action would be to drop the traffic if the URL can't be identified during HTTPS inspection.

upvoted 0 times

Hoa

9 months ago

I would go with A) reset.

upvoted 0 times

...

Rebbecca

10 months ago

I think it's C) pass.

upvoted 0 times

...

Sage

10 months ago

I believe the answer is D) drop.

upvoted 0 times

...