Question

A network administrator is configuring a Cisco Secure Firewall Threat Defense instance that is registered with Cisco Secure Firewall Management Center to stop internal users from downloading executable files from the internet. What must the administrator create and configure to satisfy this requirement?

Accepted Answer

D. access policy rule that allows users to reach the internet and assigns a file policy that blocks executable downloads to the rule

Answer

file policy that blocks downloads of all executable files and applies the file policy to the default action in the access policy

Answer

access policy rule that allows users to reach the internet with a second rule that blocks application executables

Answer

file policy rule that allows users to reach the internet with a second rule applied that blocks application use of FTP