350-701 · Question #422
Refer to the exhibit. When creating an access rule for URL filtering, a network engineer adds certain categories and individual URLs to block. What is the result of the configuration?
The correct answer is A. Only URLs for botnets with reputation scores of 1-3 will be blocked.. The URL filtering configuration blocks URLs for botnets with reputation scores indicating higher maliciousness.
Question
Refer to the exhibit. When creating an access rule for URL filtering, a network engineer adds certain categories and individual URLs to block. What is the result of the configuration?
Exhibit
Options
- AOnly URLs for botnets with reputation scores of 1-3 will be blocked.
- BOnly URLs for botnets with a reputation score of 3 will be blocked.
- COnly URLs for botnets with reputation scores of 3-5 will be blocked.
- DOnly URLs for botnets with a reputation score of 3 will be allowed while the rest will be
How the community answered
(38 responses)- A71% (27)
- B8% (3)
- C16% (6)
- D5% (2)
Why each option
The URL filtering configuration blocks URLs for botnets with reputation scores indicating higher maliciousness.
In many security systems, reputation scores are tiered, with lower numbers typically signifying higher risk or maliciousness. Therefore, blocking URLs for botnets with reputation scores of 1-3 targets the most dangerous or confirmed botnet activity, preventing access to sites identified within this higher threat range.
Blocking only URLs with a score of 3 would be overly specific and neglect more severe botnet threats with scores of 1 or 2.
Blocking URLs with reputation scores of 3-5 implies that 1 and 2 are considered safer, which generally contradicts the common interpretation of reputation scores where lower values often indicate greater risk.
Allowing botnet URLs with a score of 3 goes against the objective of blocking malicious content and is inconsistent with the purpose of URL filtering for botnets.
Concept tested: URL filtering and threat reputation scores
Source: https://www.cisco.com/c/en/us/products/collateral/security/firepower-ngfw/white-paper-c11-737756.html
Topics
Community Discussion
No community discussion yet for this question.
