View all questions & answers for the Implementing and Operating Cisco Security Core Technologies (350-701 SCOR) Exam Materials exam


Implementing and Operating Cisco Security Core Technologies (350-701 SCOR) Exam Materials-Question 260 Discussion
Comment Image Comment Image Comment Image

An engineer needs to configure an access control policy rule to always send traffic for inspection without using the default action. Which action should be configured for this rule? (Choose one answer)

  • A. block
  • B. trust
  • C. monitor
  • D. allow
Correct Answer: D

Brave-Dump Clients Votes

D 100%

Comments



Anonymous User 2026-07-17 10:32:10

Selected Answers: D


Rule 1: Monitor evaluates traffic first. Monitor rules track and log network traffic. The system continues to match traffic against additional rules to determine whether to permit or deny it. (However, see an important exception and caveat at Access Control Rule Monitor Action.)

Rule 2: Trust evaluates traffic next. Matching traffic is allowed to pass to its destination without further inspection, though it is still subject to identity requirements and rate limiting. Traffic that does not match continues to the next rule.

Rule 3: Block evaluates traffic third. Matching traffic is blocked without further inspection. Traffic that does not match continues to the final rule.

Rule 4: Allow is the final rule. For this rule, matching traffic is allowed; however, prohibited files, malware, intrusions, and exploits within that traffic are detected and blocked. Remaining non-prohibited, non-malicious traffic is allowed to its destination, though it is still subject to identity requirements and rate limiting. You can configure Allow rules that perform only file inspection, or only intrusion inspection, or neither.

Default Action handles all traffic that does not match any of the rules. In this scenario, the default action performs intrusion prevention before allowing non-malicious traffic to pass. In a different deployment, you might have a default action that trusts or blocks all traffic, without further inspection. (You cannot perform file or malware inspection on traffic handled by the default action.)
  • Brave-Dumps.com Admin 2026-07-17 11:52:30
    Thanks

Anonymous User 2026-07-17 10:33:25

Selected Answers: D


allow is allow without checking default
monitor will monitor and send to next action if no rule configured after it will send it to default rule
  • Brave-Dumps.com Admin 2026-07-17 11:52:22
    Thanks

Brave-Dumps.com Admin 2026-07-17 11:52:09

Selected Answers: D


D is the correct,
https://www.cisco.com/c/en/us/td/docs/security/firepower/610/configuration/guide/fpmc-config-guide-v61/access_control_rules.html