SNCF — Securing Networks with Firepower — Question 323

In which two ways do access control policies operate on a Cisco Firepower system? (Choose two.)

Answer options

• A. Traffic inspection is interrupted temporarily when configuration changes are deployed.
• B. The system performs intrusion inspection followed by file inspection.
• C. They block traffic based on Security Intelligence data.
• D. File policies use an associated variable set to perform intrusion prevention.
• E. The system performs a preliminary inspection on trusted traffic to validate that it matches the trusted parameters.

Correct answer: C, E

Explanation

The correct answers, C and E, indicate that the system uses Security Intelligence data to block traffic and performs preliminary inspections on trusted traffic. Options A and B are incorrect because they describe processes that do not align with the specific functions of access control policies, while D incorrectly describes the role of file policies in intrusion prevention.