350-701 Network Security Practice Question
A Cisco FTD is deployed in inline mode and configured with an access control policy. The policy includes rules with actions: Trust, Allow, Block, and Interactive Block. Which two statements about these actions are correct? (Choose two.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Trust action bypasses all further inspection modules.
Trust bypasses all further inspection. Allow permits traffic but subjects it to inspection. Block drops traffic. Interactive Block challenges the user with a block page and allows them to proceed if they accept.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Trust action bypasses all further inspection modules.
Why this is correct
Trust skips IPS, file, and URL filtering.
- ✓
Interactive Block action shows a block page to the user.
Why this is correct
Interactive Block presents a response page allowing the user to bypass the block.
- ✗
Allow action is the default action if no rule matches.
Why it's wrong here
Default action is usually Block or Intrusion Prevention.
- ✗
Block action logs the traffic and allows it to pass.
Why it's wrong here
Block drops the traffic.
- ✗
Allow action applies only URL filtering but not IPS.
Why it's wrong here
Allow action applies all configured inspections.
Go deeper
Related to this question
About these practice questions
This 350-701 question is part of Courseiva's 978-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.