350-201 Question 113
Select 3Your organization is deploying Cisco Secure Firewall Threat Defense (FTD) to protect its web application from potential cyber threats. The application is hosted on a public cloud and accessible via HTTPS. During the deployment, you are tasked with configuring application-layer security policies. Which of the following configurations should you implement to ensure granular control and visibility over application traffic?
- A
Enable Application Visibility and Control (AVC) to monitor and control application usage.
- B
Implement TLS/SSL decryption to inspect encrypted application traffic.
- C
Configure URL filtering to block access to specific web categories.
- D
Enable identity-based policies to enforce user-specific application controls.
- E
Disable intrusion prevention system (IPS) to reduce resource usage on the firewall.
Show answer and explanation
Correct answers: A, B, D
Explanation
To ensure granular control and visibility over application traffic, enabling AVC, performing TLS/SSL decryption, and using identity-based policies are essential. These configurations allow for comprehensive monitoring, inspection, and enforcement of security policies at the application layer. URL filtering, while helpful, is not a direct application-layer control, and disabling IPS would compromise security rather than enhance it.
- A. Correct.
Application Visibility and Control (AVC) is essential for monitoring and managing application traffic, providing insights into which applications are being used and allowing you to enforce controls as needed.
- B. Correct.
TLS/SSL decryption is crucial for inspecting encrypted traffic, as many modern threats are hidden within encrypted sessions. Without decryption, malicious activities could bypass security measures.
- C. Incorrect.
While URL filtering is useful, it is not directly related to application-layer security. Its primary purpose is to restrict access to specific web content categories, not provide granular application control.
- D. Correct.
Identity-based policies allow for user- or group-specific application control, enhancing security by tailoring policies to individual users or roles.
- E. Incorrect.
Disabling the intrusion prevention system (IPS) would reduce the firewall's ability to detect and prevent threats, which is counterproductive to the goal of securing the application.