300-415 · Question #334
Which configuration component is used in a firewall security policy?
The correct answer is B. numbered sequences of match-action pairs. A firewall security policy is configured using numbered sequences of match-action pairs to define the traffic filtering rules.
Question
Options
- Aintrusion prevention policy
- Bnumbered sequences of match-action pairs
- Capplication match parameters
- DURL filtering policy
How the community answered
(22 responses)- B95% (21)
- C5% (1)
Why each option
A firewall security policy is configured using numbered sequences of match-action pairs to define the traffic filtering rules.
An intrusion prevention policy is a distinct security feature, often integrated with a firewall, but not the core 'configuration component' of the firewall policy itself.
Firewall policies are fundamentally defined by a series of rules, where each rule is identified by a sequence number and contains conditions to match traffic (e.g., source/destination IP, port) and an action to take (e.g., permit, deny).
Application match parameters are criteria used within a firewall policy to identify traffic, but they are specific elements within the broader structure of match-action pairs, not the overarching configuration component.
A URL filtering policy is a specific type of filtering, often a feature of a firewall or proxy, but it's not the general 'configuration component' that defines the firewall policy structure.
Concept tested: Firewall policy structure and components
Source: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-17-book/sdwan-security-config.html
Topics
Community Discussion
No community discussion yet for this question.