CCNP Security Question of the Week: Layer 5–7 Policy Maps

May 29, 2015 Johnny Bass Cisco, Cloudera, Featured, Professional Development, Project Management, Routing & Switching, Technology, Training in Business

On the Cisco Adaptive Security Appliance (ASA), where are the Layer 5–7 policy maps applied?

A. Inside the Layer 5–7 class map.
B. Inside the Layer 3–4 policy map.
C. Inside the Layer 3–4 class map.
D. Inside the Layer 3–4 service policy.

Reveal Answer

Answer: B.

The layer 5–7 policy map matches on class-map that match on upper layer information. The application of a layer 5–7 policy-map is different than implementing a layer 3/4 policy. A layer 5–7 policy-map is not applied to a specific zone-pair, but to an existing layer 3/4 policy-map. This is done by nesting inside a layer 3/4 policy-map.

Related Resources
Cisco White Papers

Related Course
CCNP Security e-Camp

CCNP Security Question of the Week Series

CCNP Security Question of the Week: Cisco ASA Security Context
CCNP Security Question of the Week: Authenticating ASDM Users
CCNP Security Question of the Week: Layer 5–7 Policy Maps

Please support our Sponsors here :