An administrator would like to override the default deny action for a given application, and instead would like to block the traffic. Which security policy action causes this?

The correct answer is A. Drop. The Drop security policy action silently drops the traffic. This overrides the default deny action for an application, and instead blocks the traffic. The Drop, send ICMP Unreachable action also drops the traffic, but it also sends an ICMP unreachable message to the source…

Security Policy Configuration

Question

Options

ADrop
BDrop, send ICMP Unreachable
CReset both
DReset client

How the community answered

(47 responses)

A
70% (33)
B
4% (2)
C
11% (5)
D
15% (7)

Explanation

The Drop security policy action silently drops the traffic. This overrides the default deny action for an application, and instead blocks the traffic. The Drop, send ICMP Unreachable action also drops the traffic, but it also sends an ICMP unreachable message to the source device. The Reset both and Reset client actions send a TCP reset to both the source and destination devices. Therefore, the Drop security policy action is the only one that will override the default deny action for an application and block the traffic.

Topics

#security policy actions#drop action#deny override#block vs deny

Community Discussion

No community discussion yet for this question.

Full NETSEC-ANALYST Practice