300-710 · Question #145
A network administrator notices that inspection has been interrupted on all non-managed interfaces of a device. What is the cause of this?
The correct answer is A. The value of the highest MTU assigned to any non-management interface was changed. Changing the highest MTU value among all non-management interfaces on the device restarts the Snort process when you deploy configuration changes, temporarily interrupting traffic inspection. Inspection is interrupted on all non-management interfaces, not just the interface you…
Question
A network administrator notices that inspection has been interrupted on all non-managed interfaces of a device. What is the cause of this?
Options
- AThe value of the highest MTU assigned to any non-management interface was changed.
- BThe value of the highest MSS assigned to any non-management interface was changed.
- CA passive interface was associated with a security zone.
- DMultiple inline interface pairs were added to the same inline interface.
How the community answered
(43 responses)- A81% (35)
- B9% (4)
- C2% (1)
- D7% (3)
Explanation
Changing the highest MTU value among all non-management interfaces on the device restarts the Snort process when you deploy configuration changes, temporarily interrupting traffic inspection. Inspection is interrupted on all non-management interfaces, not just the interface you modified. Whether this interruption drops traffic or passes it without further inspection depends on the model of the managed device and the interface type. See Snort® Restart Traffic Behavior for more information. guide-v60/fpmc-config-guide-v60_chapter_01101010.html
Topics
Community Discussion
No community discussion yet for this question.