350-701 Network Security Practice Question
A company uses Cisco Firepower Threat Defense (FTD) managed by FMC. They need to create an access control policy that allows traffic from specific source IPs to a web server, but blocks all other traffic. How should the rule base be ordered?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Place the permit rule first, then the block rule.
Access control rules are evaluated in order from top to bottom. The first matching rule is applied. Therefore, the permit rule for the specific source IPs must come before the final block rule.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Place the block rule first, then the permit rule.
Why it's wrong here
If block rule is first, all traffic including the specific IPs will be blocked.
- ✓
Place the permit rule first, then the block rule.
Why this is correct
The permit rule matches first for allowed sources; the block rule catches all others.
- ✗
Use a single rule with permit and block conditions combined.
Why it's wrong here
A single rule cannot simultaneously permit some and block others based on source IP.
- ✗
Order does not matter because FMC processes rules in parallel.
Why it's wrong here
Rules are processed sequentially from top to bottom.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-701 question from scratch — 978 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.