Cisco 350-701 Exam - Topic 5 Question 90 Discussion

Actual exam question for Cisco's 350-701 exam

Question #: 90
Topic #: 5

What is the default action before identifying the URL during HTTPS inspection in Cisco Secure Firewall Threat Defense software?

Areset

Bbuffer

Cpass

Ddrop

Show Suggested Answer

Suggested Answer: C

Before identifying the URL during HTTPS inspection in Cisco Secure Firewall Threat Defense software, the default action is to 'pass.' This means that the traffic is allowed through without inspection until the URL can be identified, at which point appropriate security policies can be applied based on the URL categorization and reputation.

by Rusty at Jun 24, 2024, 08:47 AM

Limited Time Offer

25%

Off

Get Premium 350-701 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Norah

9 months ago

Wait, really? I always assumed it was "buffer"!

upvoted 0 times

...

Natalie

9 months ago

Yeah, "pass" makes sense for HTTPS inspection.

upvoted 0 times

...

Matt

10 months ago

"Drop" seems too harsh for default action.

upvoted 0 times

...

Carol

10 months ago

I thought it was "reset," but I guess not!

upvoted 0 times

...

Cordie

10 months ago

It's definitely "pass" by default.

upvoted 0 times

...

Loren

10 months ago

I’m leaning towards "buffer," but I can't recall if that was specifically for HTTPS inspection or something else.

upvoted 0 times

...

Stephanie

11 months ago

I want to say it's "drop," but I feel like that might be too aggressive for initial handling.

upvoted 0 times

...

Junita

11 months ago

I remember practicing a similar question, and I believe it was about "reset" actions, but that doesn't seem right here.

upvoted 0 times

...

Jose

11 months ago

I think the default action is to "pass" the traffic before identifying the URL, but I'm not completely sure.

upvoted 0 times

...

Ruthann

11 months ago

Okay, I think I've got this. The default action before identifying the URL during HTTPS inspection is to reset the connection. That way, the firewall can take a closer look at the traffic before deciding how to handle it.

upvoted 0 times

...

Alease

11 months ago

Ah, I remember learning about this in my networking class. I believe the default action is to buffer the traffic while the URL is being identified. Let me double-check that, though.

upvoted 0 times

...

Lonna

11 months ago

Okay, let me see... The options are reset, buffer, pass, or drop. I'm not too familiar with this software, so I'll have to read the question closely and try to reason through the best answer.

upvoted 0 times

...

Danica

11 months ago

Hmm, this seems like a pretty specific question about Cisco Secure Firewall Threat Defense software. I'll need to think carefully about the default action before identifying the URL during HTTPS inspection.

upvoted 0 times

...

Margurite

11 months ago

I'm a bit confused by this question. I don't have much experience with Cisco Secure Firewall Threat Defense software, so I'm not sure which of these options is the correct default action. I'll have to guess and hope for the best.

upvoted 0 times

...

Pansy

11 months ago

I've got a good handle on this topic. I think the most acceptable control method to the individual would be peer reviews.

upvoted 0 times

...

Erinn

11 months ago

B, False. PBC is all about aligning incentives and payments with desired outcomes, which makes sense for custom work. But COTS products are more standardized, so PBC wouldn't really apply in that context.

upvoted 0 times

...

Blythe

11 months ago

I remember studying about the Standardized Service Contract principle. It seems crucial for ensuring consistent service capability across all implementations, but I'm not entirely sure how it applies in this specific situation.

upvoted 0 times

...

Scarlet

2 years ago

I think resetting the connection would be a safer default action.

upvoted 0 times

...

Willow

2 years ago

But wouldn't dropping the connection be too harsh?

upvoted 0 times

...

Herminia

2 years ago

I believe it's to drop.

upvoted 0 times

...

Willow

2 years ago

I think the default action is to pass.

upvoted 0 times

...

Melissa

2 years ago

I don't know, but I bet the person who wrote this question is a real HTTPS ninja. They're probably sipping on a cup of Earl Grey while chuckling at our attempts to outsmart them.

upvoted 0 times

Yuki

2 years ago

C) pass

upvoted 0 times

...

Selma

2 years ago

A) reset

upvoted 0 times

...

Tamar

2 years ago

D) drop, for sure. You can't just let unidentified HTTPS traffic through, that's like opening the door to all kinds of security risks. Drop it and let the admins sort it out later.

upvoted 0 times

...

Douglass

2 years ago

Hmm, I'm going with B) buffer. That way, the traffic can be held while the firewall tries to figure out what's going on. Dropping or passing it right away seems a bit risky.

upvoted 0 times

Delila

2 years ago

I agree, but I still think B) buffer could be a good choice too.

upvoted 0 times

...

Ciara

2 years ago

I think C) pass would be the safest option.

upvoted 0 times

...

Germaine

2 years ago

C) pass seems like the right choice. I mean, if you can't identify the URL, why would you want to drop the traffic? Passing it through seems like the logical default action.

upvoted 0 times

...

Yuki

2 years ago

I think the answer is D) drop. It makes sense that the default action would be to drop the traffic if the URL can't be identified during HTTPS inspection.

upvoted 0 times

Hoa

2 years ago

I would go with A) reset.

upvoted 0 times

...

Rebbecca

2 years ago

I think it's C) pass.

upvoted 0 times

...

Sage

2 years ago

I believe the answer is D) drop.

upvoted 0 times

...