A company.com wants to enable Application Override. Given the following screenshot: Which two statements are true if Source and Destination traffic match the Application Override policy? (Choose two)

Question

Exhibit

Options

• ATraffic that matches "rtp-base" will bypass the App-ID and Content-ID engines.
• BTraffic will be forced to operate over UDP Port 16384.
• CTraffic utilizing UDP Port 16384 will now be identified as "rtp-base".
• DTraffic utilizing UDP Port 16384 will bypass the App-ID and Content-ID engines.

• A
  4% (2)
• B
  2% (1)
• C
  94% (44)

Explanation

Application Override forces the firewall to classify matching traffic as the specified application regardless of its actual payload, bypassing both App-ID and Content-ID engines (no threat, URL, or file inspection occurs). Therefore: (C) is true - traffic on UDP port 16384 matching the policy will be labeled 'rtp-base' by the firewall; and (D) is true - that traffic bypasses App-ID and Content-ID engines entirely. (A) is incorrect because it inverts the relationship - it is the traffic matching the port criteria that gets the bypass, not a named app triggering the bypass. (B) is incorrect because Application Override does not force traffic onto a specific port; it identifies existing traffic on that port.

No community discussion yet for this question.