Cisco Updated 300-710 Exam Questions and Answers by caspar

https://www.cisco.com/c/en/us/td/docs/security/asa/asa910/configuration/firewall/asa-910-firewall-config/access-sfr.html

Inline tap monitor-only mode (ASA inline)—In an inline tap monitor-only deployment, a copy of the traffic is sent to the ASA FirePOWER module, but it is not returned to the ASA. Inline tap mode lets you see what the ASA FirePOWER module would have done to traffic, and lets you evaluate the content of the traffic, without impacting the network. However, in this mode, the ASA does apply its policies to the traffic, so traffic can be dropped due to access rules, TCP normalization, and so forth.

The Untrusted reputation level represents URLs associated with malicious, undesirable, or demonstrably unsafe behavior and is therefore the appropriate selection for the access control rule. Questionable applies to URLs that exhibit suspicious characteristics but lack sufficient evidence to be classified as definitively malicious. Neutral identifies sites without a strong positive or negative reputation, while Favorable indicates generally acceptable sites with a positive reputation history. Secure Firewall Management Center combines URL categories with reputation values to provide more precise web-control decisions. Selecting Untrusted enables the rule to match the highest-risk URLs covered by the requirement without unnecessarily treating merely unknown or neutral sites as confirmed threats. Cisco documents URL reputation as the risk component used with URL categories in category-and-reputation-based filtering. Cisco Secure Firewall URL filtering

================