nerdexam
Cisco

300-710 · Question #31

What are 2 types or forms of suppression on a FirePower policy (or FTD)?

The correct answer is A. source C. rule. Two types of suppression available in a Cisco Firepower policy are source-based suppression and rule-based suppression.

Configuration

Question

What are 2 types or forms of suppression on a FirePower policy (or FTD)?

Options

  • Asource
  • Bport
  • Crule
  • Dprotocol
  • Eapplication

How the community answered

(41 responses)
  • A
    93% (38)
  • D
    2% (1)
  • E
    5% (2)

Why each option

Two types of suppression available in a Cisco Firepower policy are source-based suppression and rule-based suppression.

AsourceCorrect

Source-based suppression in Cisco Firepower policies allows administrators to suppress intrusion events or alerts originating from specific source IP addresses or networks, which is useful for ignoring traffic from trusted internal scanning tools or known safe hosts.

Bport

Port-based suppression is not a distinct primary type of suppression but can be a condition within a rule or source-based suppression.

CruleCorrect

Rule-based suppression allows an administrator to disable or suppress specific intrusion rules globally or under certain conditions, helping to reduce false positives for particular environments without completely disabling the rule.

Dprotocol

Protocol-based suppression is not a distinct primary type of suppression but can be a condition within a rule or source-based suppression.

Eapplication

Application-based suppression is not a distinct primary type of suppression but can be a condition within a rule or source-based suppression.

Concept tested: Cisco Firepower event suppression types

Source: https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/intrusion_policies_overview.html#ID-2234-00000109

Topics

#Firepower FTD#IPS Suppression#Policy Configuration

Community Discussion

No community discussion yet for this question.

Full 300-710 Practice