CCIE Security Exam 400-251: HTTP Inspection Engine Parameters

HTTP Inspection Engine Parameters

Prev Question Next Question

Question

The HTTP inspection engine has the ability to inspect traffic based on which three parameters? (Choose three.)

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D. E. F.

ABD.

The HTTP inspection engine is a feature in network security devices that allows for the inspection of HTTP traffic to identify potential security threats. When inspecting HTTP traffic, the engine can inspect traffic based on various parameters. The three parameters that the HTTP inspection engine can inspect traffic based on are as follows:

A. Transfer Encoding: This parameter allows the inspection engine to inspect the encoding used to transfer data in the HTTP message body. Transfer encoding can be chunked or gzip, among others.

B. Request Method: The inspection engine can inspect HTTP traffic based on the method used in the request. The HTTP methods include GET, POST, PUT, DELETE, HEAD, OPTIONS, and others.

C. Header: The inspection engine can inspect HTTP traffic based on the headers included in the request or response. HTTP headers provide additional information about the request or response, such as content type, user agent, accept-language, and others.

D. Application Type: The inspection engine can inspect HTTP traffic based on the application type. For example, it can identify traffic from web-based applications such as Facebook, Twitter, or LinkedIn.

E. Header Size: The inspection engine can inspect HTTP traffic based on the size of the headers included in the request or response. Large header sizes may indicate a potential security threat, such as an HTTP flood attack.

F. Source Address: This parameter is not related to HTTP inspection, but rather identifies the source of the HTTP traffic. It can be used in combination with other parameters to identify potential security threats.

In summary, the HTTP inspection engine can inspect traffic based on the transfer encoding, request method, headers, application type, and header size parameters.