nerdexam
Cisco

300-710 · Question #369

A security engineer must add a new policy to block UDP traffic to one server. The engineer adds a new object. Which action must the engineer take next to identify all the UDP ports?

The correct answer is A. Specify the transport protocol and leave the port number empty. When creating an access rule or object to block all UDP traffic to a server, specifying the transport protocol as UDP without defining any specific port number effectively matches all UDP ports. This means the rule will apply to all UDP traffic regardless of port number.

Configuration

Question

A security engineer must add a new policy to block UDP traffic to one server. The engineer adds a new object. Which action must the engineer take next to identify all the UDP ports?

Options

  • ASpecify the transport protocol and leave the port number empty.
  • BDefine the transport protocol and the mandatory port range.
  • CAdd the transport number and specify the type and code.
  • DAdd the corresponding IP protocol number for UDP and TCP.

How the community answered

(46 responses)
  • A
    93% (43)
  • C
    4% (2)
  • D
    2% (1)

Explanation

When creating an access rule or object to block all UDP traffic to a server, specifying the transport protocol as UDP without defining any specific port number effectively matches all UDP ports. This means the rule will apply to all UDP traffic regardless of port number.

Topics

#Security Policy#Firewall Configuration#UDP Traffic#Network Objects

Community Discussion

No community discussion yet for this question.

Full 300-710 Practice