PrepAway - Latest Free Exam Questions & Answers

which traffic is matched for inspections by default?

In the default global policy, which traffic is matched for inspections by default?

PrepAway - Latest Free Exam Questions & Answers

A.
match any

B.
match default-inspection-traffic

C.
match access-list

D.
match port

E.
match class-default

Explanation:
http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/inspect.html#wp13836 Default Inspection Policy
By default, the configuration includes a policy that matches all default application inspection traffic and applies inspection to the traffic on all interfaces (a global
policy). Default application inspection traffic includes traffic to the default ports for each protocol. You can only apply one global policy, so if you want to alter the
global policy, for example, to apply inspection to non- standard ports, or to add inspections that are not enabled by default, you need to either edit the default policy
or disable it and apply a new one.


Leave a Reply