Which default action setting in a Cisco FTD Access Control Policy allows all traffic from an undefined application to pass without Snort inspection?

Network Discovery Only would allow traffic to pass but would still perform network discovery, not necessarily bypassing all Snort inspection, and it's not a common default action for simply allowing traffic without inspection.

Inherit from Base Policy implies the action is determined by a parent policy, which doesn't directly define the behavior for "undefined application" traffic.

Intrusion Prevention explicitly enables Snort inspection, which is the opposite of the requirement to pass traffic without Snort inspection.

The "Trust All Traffic" action in an FTD Access Control Policy is designed to permit traffic without any Snort-based intrusion inspection, file policy inspection, or malware inspection. This effectively bypasses deeper security analysis for trusted or undefined applications, allowing them to pass through.