SNCF — Securing Networks with Firepower — Question 311

A network engineer is tasked with minimizing traffic interruption during peak traffic times. When the SNORT inspection engine is overwhelmed, what must be configured to alleviate this issue?

Answer options

• A. Enable IPS inline link state propagation
• B. Enable Pre-filter policies before the SNORT engine failure
• C. Set a Trust ALL access control policy
• D. Enable Automatic Application Bypass

Correct answer: D

Explanation

The correct answer is D, as enabling Automatic Application Bypass allows traffic to bypass the SNORT engine when it is overwhelmed, ensuring continuous network operation. Options A and B do not directly address the issue of managing SNORT overload, while C would compromise security by allowing all traffic without inspection.