Cisco Exam 350-701 Topic 5 Question 90 Discussion

Actual exam question for Cisco's 350-701 exam

Question #: 90
Topic #: 5

What is the default action before identifying the URL during HTTPS inspection in Cisco Secure Firewall Threat Defense software?

Areset

Bbuffer

Cpass

Ddrop

Show Suggested Answer

Suggested Answer: C

Before identifying the URL during HTTPS inspection in Cisco Secure Firewall Threat Defense software, the default action is to 'pass.' This means that the traffic is allowed through without inspection until the URL can be identified, at which point appropriate security policies can be applied based on the URL categorization and reputation.

by Rusty at Jun 24, 2024, 08:47 AM

Limited Time Offer

25%

Off

Get Premium 350-701 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Scarlet

11 months ago

I think resetting the connection would be a safer default action.

upvoted 0 times

...

Willow

11 months ago

But wouldn't dropping the connection be too harsh?

upvoted 0 times

...

Herminia

11 months ago

I believe it's to drop.

upvoted 0 times

...

Willow

12 months ago

I think the default action is to pass.

upvoted 0 times

...

Melissa

12 months ago

I don't know, but I bet the person who wrote this question is a real HTTPS ninja. They're probably sipping on a cup of Earl Grey while chuckling at our attempts to outsmart them.

upvoted 0 times

Yuki

11 months ago

C) pass

upvoted 0 times

...

Selma

11 months ago

A) reset

upvoted 0 times

...

Tamar

12 months ago

D) drop, for sure. You can't just let unidentified HTTPS traffic through, that's like opening the door to all kinds of security risks. Drop it and let the admins sort it out later.

upvoted 0 times

...

Douglass

1 years ago

Hmm, I'm going with B) buffer. That way, the traffic can be held while the firewall tries to figure out what's going on. Dropping or passing it right away seems a bit risky.

upvoted 0 times

Delila

11 months ago

I agree, but I still think B) buffer could be a good choice too.

upvoted 0 times

...

Ciara

11 months ago

I think C) pass would be the safest option.

upvoted 0 times

...

Germaine

1 years ago

C) pass seems like the right choice. I mean, if you can't identify the URL, why would you want to drop the traffic? Passing it through seems like the logical default action.

upvoted 0 times

...

Yuki

1 years ago

I think the answer is D) drop. It makes sense that the default action would be to drop the traffic if the URL can't be identified during HTTPS inspection.

upvoted 0 times

Hoa

11 months ago

I would go with A) reset.

upvoted 0 times

...

Rebbecca

12 months ago

I think it's C) pass.

upvoted 0 times

...

Sage

12 months ago

I believe the answer is D) drop.

upvoted 0 times

...