nerdexam
Cisco

700-281 · Question #4

Which statement is true?

The correct answer is A. The L4TM allow list overrides the block list. Option A is correct because L4TM (Layer 4 Traffic Management) is designed so that explicitly permitted traffic on the allow list takes precedence - if an entry appears on both lists, the allow list wins and the traffic is permitted. This design ensures that intentional…

Implement and Configure Cisco Web Security Appliances

Question

Which statement is true?

Options

  • AThe L4TM allow list overrides the block list.
  • BThe overlap of the L4TM allow list and block list is the L4TM grey list
  • CThe L4TM block lists override the allow lists.
  • DL4TM allow list and block list overlaps are not permitted.

How the community answered

(58 responses)
  • A
    90% (52)
  • B
    5% (3)
  • C
    3% (2)
  • D
    2% (1)

Explanation

Option A is correct because L4TM (Layer 4 Traffic Management) is designed so that explicitly permitted traffic on the allow list takes precedence - if an entry appears on both lists, the allow list wins and the traffic is permitted. This design ensures that intentional exceptions to blocking rules are always honored.

Option B is wrong because there is no concept of a "grey list" in L4TM; overlapping entries don't create a third category - the conflict is resolved by the allow list winning.

Option C is wrong because it states the opposite of actual behavior; block lists do not override allow lists in L4TM - allow lists have higher priority.

Option D is wrong because overlaps between the two lists are entirely permitted; the system simply has a defined rule (allow wins) for resolving them rather than prohibiting the overlap.

Memory tip: Think of an allowlist as a VIP pass - it overrides the general "no entry" block list. In L4TM, Allow = Above the block list in priority.

Topics

#L4TM#Allow/Block Lists#Rule Precedence#Traffic Policies

Community Discussion

No community discussion yet for this question.

Full 700-281 Practice