Cisco Exam 350-701 Topic 5 Question 90 Discussion

Actual exam question for Cisco's 350-701 exam

Question #: 90
Topic #: 5

What is the default action before identifying the URL during HTTPS inspection in Cisco Secure Firewall Threat Defense software?

Areset

Bbuffer

Cpass

Ddrop

Show Suggested Answer

Suggested Answer: C

Before identifying the URL during HTTPS inspection in Cisco Secure Firewall Threat Defense software, the default action is to 'pass.' This means that the traffic is allowed through without inspection until the URL can be identified, at which point appropriate security policies can be applied based on the URL categorization and reputation.

by Rusty at Jun 24, 2024, 08:47 AM

Limited Time Offer

25%

Off

Get Premium 350-701 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Scarlet

5 months ago

I think resetting the connection would be a safer default action.

upvoted 0 times

...

Willow

5 months ago

But wouldn't dropping the connection be too harsh?

upvoted 0 times

...

Herminia

5 months ago

I believe it's to drop.

upvoted 0 times

...

Willow

5 months ago

I think the default action is to pass.

upvoted 0 times

...

Melissa

5 months ago

I don't know, but I bet the person who wrote this question is a real HTTPS ninja. They're probably sipping on a cup of Earl Grey while chuckling at our attempts to outsmart them.

upvoted 0 times

Yuki

5 months ago

C) pass

upvoted 0 times

...

Selma

5 months ago

A) reset

upvoted 0 times

...

Tamar

6 months ago

D) drop, for sure. You can't just let unidentified HTTPS traffic through, that's like opening the door to all kinds of security risks. Drop it and let the admins sort it out later.

upvoted 0 times

...

Douglass

6 months ago

Hmm, I'm going with B) buffer. That way, the traffic can be held while the firewall tries to figure out what's going on. Dropping or passing it right away seems a bit risky.

upvoted 0 times

Delila

5 months ago

I agree, but I still think B) buffer could be a good choice too.

upvoted 0 times

...

Ciara

5 months ago

I think C) pass would be the safest option.

upvoted 0 times

...

Germaine

6 months ago

C) pass seems like the right choice. I mean, if you can't identify the URL, why would you want to drop the traffic? Passing it through seems like the logical default action.

upvoted 0 times

...

Yuki

6 months ago

I think the answer is D) drop. It makes sense that the default action would be to drop the traffic if the URL can't be identified during HTTPS inspection.

upvoted 0 times

Hoa

5 months ago

I would go with A) reset.

upvoted 0 times

...

Rebbecca

5 months ago

I think it's C) pass.

upvoted 0 times

...

Sage

5 months ago

I believe the answer is D) drop.

upvoted 0 times

...