nerdexam
Cisco

300-710 · Question #162

An organization does not want to use the default Cisco Firepower block page when blocking HTTP traffic. The organization wants to include information about its policies and procedures to help…

The correct answer is C. Create HTML code with the information for the policies and procedures D. Change the HTTP response in the access control policy to custom. To display a custom block page with organizational policies instead of the default Cisco Firepower block page, an administrator must create HTML content for the page and then configure the access control policy to use this custom HTTP response.

Configuration

Question

An organization does not want to use the default Cisco Firepower block page when blocking HTTP traffic. The organization wants to include information about its policies and procedures to help educate the users whenever a block occurs. Which two steps must be taken to meet these requirements? (Choose two.)

Options

  • AEdit the HTTP request handling in the access control policy to customized block
  • BModify the system-provided block page result using Python
  • CCreate HTML code with the information for the policies and procedures
  • DChange the HTTP response in the access control policy to custom
  • EWrite CSS code with the information for the policies and procedures

How the community answered

(30 responses)
  • A
    10% (3)
  • B
    3% (1)
  • C
    83% (25)
  • E
    3% (1)

Why each option

To display a custom block page with organizational policies instead of the default Cisco Firepower block page, an administrator must create HTML content for the page and then configure the access control policy to use this custom HTTP response.

AEdit the HTTP request handling in the access control policy to customized block

Editing HTTP *request* handling is not the correct mechanism for customizing the block *response page*. Customization applies to the HTTP response sent back to the user.

BModify the system-provided block page result using Python

Modifying system-provided block pages using Python is not the standard or supported method for customizing block pages in Cisco Firepower; custom pages are typically uploaded as HTML.

CCreate HTML code with the information for the policies and proceduresCorrect

Creating HTML code is essential because custom block pages for HTTP traffic are rendered using HTML, allowing the organization to include specific information about its policies and procedures.

DChange the HTTP response in the access control policy to customCorrect

Within the Access Control Policy, the action for blocking HTTP traffic can be configured to use a 'custom' HTTP response, which involves uploading the custom HTML page to be displayed when traffic is blocked.

EWrite CSS code with the information for the policies and procedures

While CSS can be used to style an HTML page, the primary content containing the 'information about its policies and procedures' is contained within the HTML code, not directly within CSS.

Concept tested: Cisco FTD custom block pages for HTTP

Source: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/Access_Control_Policies.html#ID-2253-0-0-1-6-2-1

Topics

#Firepower#Access Control Policy#Custom Block Page#HTTP Traffic Blocking

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 300-710 Practice