300-710 · Question #254
A Cisco FMC administrator wants to configure fastpathing of trusted network traffic to increase performance. In which type of policy would the administrator configure this feature?
The correct answer is B. Prefilter policy. To fastpath trusted network traffic and improve performance, the administrator would configure rules within a Prefilter policy, which allows specific traffic to bypass deeper inspection stages.
Question
A Cisco FMC administrator wants to configure fastpathing of trusted network traffic to increase performance. In which type of policy would the administrator configure this feature?
Options
- AIdentity policy
- BPrefilter policy
- CNetwork Analysis policy
- DIntrusion policy
How the community answered
(29 responses)- A3% (1)
- B86% (25)
- C3% (1)
- D7% (2)
Why each option
To fastpath trusted network traffic and improve performance, the administrator would configure rules within a Prefilter policy, which allows specific traffic to bypass deeper inspection stages.
An Identity policy is used for user authentication and authorization, not for controlling traffic inspection levels or fastpathing for performance.
Prefilter policies are specifically designed to allow administrators to quickly categorize and handle traffic before it reaches the main Access Control policy and Snort inspection engine. This is where rules for fastpathing trusted traffic are configured, enabling it to bypass deeper scrutiny and improve overall performance.
A Network Analysis policy defines advanced detection settings for the Snort inspection engine, which is a deeper level of inspection, not for bypassing it.
An Intrusion policy defines rules for the Snort intrusion detection/prevention engine, which performs deep packet inspection, the opposite of fastpathing.
Concept tested: Configuring traffic fastpathing
Source: https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/prefilter-policies.html
Topics
Community Discussion
No community discussion yet for this question.