nerdexam
Cisco

300-710 · Question #254

A Cisco FMC administrator wants to configure fastpathing of trusted network traffic to increase performance. In which type of policy would the administrator configure this feature?

The correct answer is B. Prefilter policy. To fastpath trusted network traffic and improve performance, the administrator would configure rules within a Prefilter policy, which allows specific traffic to bypass deeper inspection stages.

Configuration

Question

A Cisco FMC administrator wants to configure fastpathing of trusted network traffic to increase performance. In which type of policy would the administrator configure this feature?

Options

  • AIdentity policy
  • BPrefilter policy
  • CNetwork Analysis policy
  • DIntrusion policy

How the community answered

(29 responses)
  • A
    3% (1)
  • B
    86% (25)
  • C
    3% (1)
  • D
    7% (2)

Why each option

To fastpath trusted network traffic and improve performance, the administrator would configure rules within a Prefilter policy, which allows specific traffic to bypass deeper inspection stages.

AIdentity policy

An Identity policy is used for user authentication and authorization, not for controlling traffic inspection levels or fastpathing for performance.

BPrefilter policyCorrect

Prefilter policies are specifically designed to allow administrators to quickly categorize and handle traffic before it reaches the main Access Control policy and Snort inspection engine. This is where rules for fastpathing trusted traffic are configured, enabling it to bypass deeper scrutiny and improve overall performance.

CNetwork Analysis policy

A Network Analysis policy defines advanced detection settings for the Snort inspection engine, which is a deeper level of inspection, not for bypassing it.

DIntrusion policy

An Intrusion policy defines rules for the Snort intrusion detection/prevention engine, which performs deep packet inspection, the opposite of fastpathing.

Concept tested: Configuring traffic fastpathing

Source: https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/prefilter-policies.html

Topics

#FMC Prefilter policy#Traffic optimization#Fastpathing#Network performance

Community Discussion

No community discussion yet for this question.

Full 300-710 Practice