nerdexam
Cisco

300-415 · Question #71

A network administrator is configuring an application-aware firewall between inside zones to an outside zone on a WAN edge router using vManage GUI. What kind of Inspection is performed when the…

The correct answer is A. stateful inspection for TCP and UDP. When the "inspect" action is used in a Cisco SD-WAN application-aware firewall, it performs stateful inspection for both TCP and UDP traffic.

Security and Quality of Service

Question

A network administrator is configuring an application-aware firewall between inside zones to an outside zone on a WAN edge router using vManage GUI. What kind of Inspection is performed when the "inspect" action is used?

Options

  • Astateful inspection for TCP and UDP
  • Bstateful inspection for TCP and stateless inspection of UDP
  • CIPS inspection for TCP and-Layer 4 inspection for UDP
  • DLayer 7 inspection for TCP and Layer 4 inspection for UDP

How the community answered

(24 responses)
  • A
    88% (21)
  • B
    4% (1)
  • D
    8% (2)

Why each option

When the "inspect" action is used in a Cisco SD-WAN application-aware firewall, it performs stateful inspection for both TCP and UDP traffic.

Astateful inspection for TCP and UDPCorrect

The "inspect" action in a Cisco SD-WAN application-aware firewall configures stateful inspection. This means the firewall actively tracks the state of TCP connections and UDP flows, allowing return traffic that is part of an established session to pass through automatically, thus providing robust security for both protocols.

Bstateful inspection for TCP and stateless inspection of UDP

The "inspect" action provides stateful inspection for both TCP and UDP traffic, not stateless inspection for UDP.

CIPS inspection for TCP and-Layer 4 inspection for UDP

IPS inspection is a distinct security function, and while Layer 4 inspection for UDP is involved, the term "inspect" refers to comprehensive stateful tracking.

DLayer 7 inspection for TCP and Layer 4 inspection for UDP

While application-aware firewalls can perform Layer 7 inspection for application identification, the "inspect" action itself primarily signifies stateful connection tracking at Layer 4 for both TCP and UDP.

Concept tested: Application-aware firewall inspect action

Source: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/security/ios-xe-17/security-book-xe/application-aware-firewall.html#C_Actions_in_an_Application_Aware_Firewall_Policy_13876.html

Topics

#Firewall#Stateful Inspection#WAN Edge#vManage

Community Discussion

No community discussion yet for this question.

Full 300-415 Practice