350-701 · Question #204
A network administrator is configuring a rule in an access control policy to block certain URLs and selects the "Chat and Instant Messaging" category. Which reputation score should be selected to acco
The correct answer is D. 3. To effectively block URLs within a specific category like 'Chat and Instant Messaging' in an access control policy, selecting a reputation score of 3 is recommended as it balances blocking known problematic sites without being overly restrictive.
Question
A network administrator is configuring a rule in an access control policy to block certain URLs and selects the "Chat and Instant Messaging" category. Which reputation score should be selected to accomplish this goal?
Exhibit
Options
- A1
- B10
- C5
- D3
How the community answered
(26 responses)- A4% (1)
- B4% (1)
- D92% (24)
Why each option
To effectively block URLs within a specific category like 'Chat and Instant Messaging' in an access control policy, selecting a reputation score of 3 is recommended as it balances blocking known problematic sites without being overly restrictive.
A reputation score of 1 typically indicates a very trustworthy or 'good' site, which would not be blocked for a category like 'Chat and Instant Messaging'.
A reputation score of 10 usually signifies an unrated or unknown site, and blocking based on this score alone might be too broad or too narrow, depending on the policy.
A reputation score of 5 often indicates sites with low reputation or known malicious content (e.g., spam, malware), which is generally a higher level of threat than what blocking 'Chat and Instant Messaging' implies for simple productivity reasons.
When configuring URL filtering based on categories, a reputation score of 3 (Questionable) is typically chosen to block sites that are not explicitly malicious but might be unproductive or undesirable in a corporate setting, such as chat or instant messaging sites. This score allows for blocking content that isn't necessarily dangerous but also not enterprise-appropriate.
Concept tested: URL Filtering Reputation Scores
Source: https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/url_filtering_for_access_control.html
Topics
Community Discussion
No community discussion yet for this question.
