A network security engineer is examining the Zone-based Policy Firewall configuration on a Cisco router and observes the following output: What is the purpose of the class class-default and drop commands in this configuration segment?

IT Exam Items RepositoryCategory: Cybersecurity EssentialsA network security engineer is examining the Zone-based Policy Firewall configuration on a Cisco router and observes the following output: What is the purpose of the class class-default and drop commands in this configuration segment?

A network security engineer is examining the Zone-based Policy Firewall configuration on a Cisco router and observes the following output:

policy-map type inspect PRIV-TO-PUB-POLICY
 class type inspect HTTP-TRAFFIC
  inspect
 class class-default
  drop

What is the purpose of the class class-default and drop commands in this configuration segment?

  • It will apply default security policies to specified traffic class traffic members.
  • It will cause all traffic that is not a member of the specified traffic class to be dropped.
  • It ensures the logging of all traffic of the specified traffic class.
  • It will apply stated-based traffic control to default traffic allowed to pass between specific zones.

Related exam: Cybersecurity Essentials v3.0 Course Final Exam Answers