Exam 300-710 topic 1 question 294 discussion

Actual exam question from Cisco's 300-710

Question #: 294
Topic #: 1

A software development company hosts the website https://dev.company.com for contractors to share code for projects they are working on with internal developers. The web server is on premises and is protected by a Cisco Secure Firewall Threat Defense appliance. The network administrator is worried about someone trying to transmit infected files to internal users via this site. Which type of policy must be associated with an access control policy to enable Cisco Secure Firewall Malware Defense to detect and block malware?

A. SSL policy
B. file policy
C. network discovery policy
D. prefilter policy

Show Suggested Answer

Suggested Answer: A 🗳️

by KISRUVEM at Jan. 16, 2024, 2:14 a.m.

Comments

Submit Cancel

tinyJoe

2 weeks ago

Selected Answer: A

It is a difficult choice, but I choose A. “via this site” indicates that the site probably has the ability to send and receive files. The file sending/receiving traffic should be encrypted. And just to be metaperspective, if B is the correct answer, why is it necessary to describe the HTTPS sample URL in the question? I assume it is because the author wanted to make decryption the theme of the question.

upvoted 1 times

...

gwb

3 months, 3 weeks ago

My choice is "B". Malware Defense - file policy with rule.

upvoted 4 times

MB2222

2 months, 3 weeks ago

Hmmm, I would go for (A). Why?, because it is also saying in the question focusing on the URL httpS, and without an SSL policy associated with your ACP, you are not able at all to detect any malicious traffic, files, etc. at all.

upvoted 1 times

MB2222

2 months, 2 weeks ago

... and it also says in the question to "DETECT" and block traffic. In order to see malicious files, you must be able to see them. So again, SSL policy (A) is my choice.

upvoted 1 times

...

KISRUVEM

6 months ago

Selected Answer: A

I think it’s A. You don’t associate a file policy to an ACP. You associate a file policy to an ACP rule. You associate an SSL policy to an ACP. Yes, it’s also called a “decryption policy” in the GUI but the config guide still calls it an SSL Policy.

upvoted 4 times

Bubu3k

6 months ago

That's for decrypting traffic, even if you use it you still need a file or malware policy

upvoted 6 times

...

Exam 300-710 All Questions

View all questions & answers for the 300-710 exam

Exam 300-710 topic 1 question 294 discussion

Comments

tinyJoe

gwb

MB2222

MB2222

KISRUVEM

Bubu3k

SY0-701