300-710 · Question #264
A company is deploying intrusion protection on multiple Cisco FTD appliances managed by Cisco FMC. Which system-provided policy must be selected if speed and detection are priorities?
The correct answer is D. Balanced Security and Connectivity. To prioritize both speed and detection when deploying intrusion protection on Cisco FTD appliances managed by FMC, the "Balanced Security and Connectivity" system-provided policy is the optimal choice.
Question
A company is deploying intrusion protection on multiple Cisco FTD appliances managed by Cisco FMC. Which system-provided policy must be selected if speed and detection are priorities?
Options
- AConnectivity Over Security
- BSecurity Over Connectivity
- CMaximum Detection
- DBalanced Security and Connectivity
How the community answered
(24 responses)- A4% (1)
- C4% (1)
- D92% (22)
Why each option
To prioritize both speed and detection when deploying intrusion protection on Cisco FTD appliances managed by FMC, the "Balanced Security and Connectivity" system-provided policy is the optimal choice.
The "Connectivity Over Security" policy prioritizes performance and connectivity, which would neglect the detection priority.
The "Balanced Security and Connectivity" intrusion policy offers a compromise between maximizing network performance and providing effective threat detection. It enables a set of Snort rules and preprocessors designed to provide strong security without significantly hindering network throughput, thus balancing both priorities.
Concept tested: Cisco FTD intrusion policy types
Source: https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/intrusion_policies_and_rules.html
Topics
Community Discussion
No community discussion yet for this question.