300-710 · Question #31
What are 2 types or forms of suppression on a FirePower policy (or FTD)?
The correct answer is A. source C. rule. Two types of suppression available in a Cisco Firepower policy are source-based suppression and rule-based suppression.
Question
What are 2 types or forms of suppression on a FirePower policy (or FTD)?
Options
- Asource
- Bport
- Crule
- Dprotocol
- Eapplication
How the community answered
(41 responses)- A93% (38)
- D2% (1)
- E5% (2)
Why each option
Two types of suppression available in a Cisco Firepower policy are source-based suppression and rule-based suppression.
Source-based suppression in Cisco Firepower policies allows administrators to suppress intrusion events or alerts originating from specific source IP addresses or networks, which is useful for ignoring traffic from trusted internal scanning tools or known safe hosts.
Port-based suppression is not a distinct primary type of suppression but can be a condition within a rule or source-based suppression.
Rule-based suppression allows an administrator to disable or suppress specific intrusion rules globally or under certain conditions, helping to reduce false positives for particular environments without completely disabling the rule.
Protocol-based suppression is not a distinct primary type of suppression but can be a condition within a rule or source-based suppression.
Application-based suppression is not a distinct primary type of suppression but can be a condition within a rule or source-based suppression.
Concept tested: Cisco Firepower event suppression types
Source: https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/intrusion_policies_overview.html#ID-2234-00000109
Topics
Community Discussion
No community discussion yet for this question.