Discuss Cisco 300-710 Exam Topic 8 Question 37

Refer to the exhibit An engineer is modifying an access control pokey to add a rule to inspect all DNS traffic that passes through the firewall After making the change and deploying the pokey they see that DNS traffic is not bang inspected by the Snort engine What is the problem?

AThe rule must specify the security zone that originates the traffic

BThe rule must define the source network for inspection as well as the port

CThe action of the rule is set to trust instead of allow.

DThe rule is configured with the wrong setting for the source port

Suggested Answer: A

Get Premium 300-710 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Adelina 11 months ago

Isn't it usually about the source port? Option D might be the culprit.

Jamika 11 months ago

I disagree, it could be option C. Trust settings can mess things up.

Stefanie 11 months ago

Wait, how can DNS traffic not be inspected? That seems odd.

Shawna 12 months ago

I think it's definitely option B. You need to define the source network!

Helaine 12 months ago

Sounds like a classic misconfiguration issue.

Chantell 12 months ago

I’m a bit confused about the security zone aspect. I thought that was only relevant for routing traffic, so I’m not sure about option A.

Colene 1 year ago

This question seems familiar, and I think we had a similar practice question where the source port was incorrectly configured. Could it be option D?

Nieves 1 year ago

I'm not entirely sure, but I feel like the action of the rule being set to trust could definitely cause issues with inspection. Maybe option C?

Markus 1 year ago

I remember we discussed how important it is to specify the source network in our rules, so I think option B might be the right choice.

Deane 1 year ago

This one seems straightforward. The settlement profile is where you configure the settlement-related settings, so the two correct answers are definitely defining document management parameters and determining an overhead key.

Devon 1 year ago

Alright, I think I've got it. The Contact Delete process would remove data from the Non-Sendable Data Extensions and the Import Files on the Enhanced SFTP. Those are the two correct answers based on the information provided.

Karl 1 year ago

This question seems pretty complex, but I think I can tackle it. The key is to identify the security vulnerabilities and then propose a solution that addresses them.

Cisco 300-710 Exam - Topic 8 Question 37 Discussion