350-701 Network Security Practice Question
An administrator configures a Cisco ASA with the following Modular Policy Framework (MPF) commands:
class-map type inspect http match any policy-map type inspect http http_policy parameters protocol-violation action reset service-policy http_policy global
What is the result of this configuration?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Creates an HTTP inspection policy that resets connections that violate HTTP protocol
The MPF configuration applies a protocol violation action to HTTP traffic; when a violation is detected, the ASA sends a TCP reset.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Blocks all HTTP traffic globally
Why it's wrong here
It only resets connections with protocol violations, not all HTTP traffic.
- ✗
Enables HTTP deep inspection and logs all HTTP requests
Why it's wrong here
No logging is configured; only reset action.
- ✗
Applies the policy only on the inside interface
Why it's wrong here
The service-policy is global, so it applies to all interfaces.
- ✓
Creates an HTTP inspection policy that resets connections that violate HTTP protocol
Why this is correct
The policy-map with protocol-violation action reset will reset connections that do not conform to HTTP standards.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-701 question from scratch — 978 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.