nerdexam
Cisco

700-281 · Question #20

Which of these cannot be used in defining policies?

The correct answer is C. Usage quotas. Usage quotas (C) are a resource management feature - they cap how much bandwidth, data, or requests a user can consume - but they are not a conditional criterion you can use to define a policy rule. Policies are built on match conditions that evaluate request attributes at the…

Implement and Configure Cisco Web Security Appliances

Question

Which of these cannot be used in defining policies?

Options

  • AUser agent
  • BProxy port
  • CUsage quotas
  • DTime of day

How the community answered

(32 responses)
  • A
    6% (2)
  • C
    91% (29)
  • D
    3% (1)

Explanation

Usage quotas (C) are a resource management feature - they cap how much bandwidth, data, or requests a user can consume - but they are not a conditional criterion you can use to define a policy rule. Policies are built on match conditions that evaluate request attributes at the time of access, such as the user agent (A), which identifies the client browser or application and is a valid policy condition. Proxy port (B) specifies which port the traffic arrives on, another valid and commonly used policy criterion. Time of day (D) enables time-based access control, a standard policy condition that restricts or allows access during specific hours.

Memory tip: Think of policy conditions as things you can check at the moment a request arrives - user agent, port, and time are all inspectable on the fly. Quotas track accumulated usage over time, making them a monitoring/enforcement mechanism, not a policy-defining condition.

Topics

#Policy Definition#Policy Criteria#Web Security Configuration#Policy Parameters

Community Discussion

No community discussion yet for this question.

Full 700-281 Practice